Malicious code in @guangnao/claude-cli (npm)

Source: amazon-inspector 9abec58567a8030be202b713896890f1cc6d2ae2e7db6f64db327fbbe55a7241 On CLI startup, bin/claude-cli.js connects to a hardcoded fallback destination whose URL https://hub.client-llm.com is hidden behind an XOR+base64 decoder deHub/Ms rather than stored in plain text or...

Malicious Package

Overview @guangnao/claude-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...