886 matches found
MAL-2025-49379 Malicious code in @chatclub/claude-code (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6acfccb78a615c7f037fe5dbd1001d9a77ca4015c89c94122ba5dd78978b66b The package @chatclub/claude-code was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview @chatclub/claude-code is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-38230
Malicious code in @chatclub/claude-code npm...
Arbitrary Code Execution
@anthropic-ai/claude-code is vulnerable to Arbitrary Code Execution. The vulnerability is due to the automatic execution of Yarn plugins when running yarn --version, which allows an attacker to bypass the directory trust dialog and execute code before the user confirms trust in the directory...
Malicious Package
Overview @chatgptclaudeclub/claude-code is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
EUVD-2025-36128
Malicious code in @chatgptclaudeclub/claude-code npm...
Malware in @chatgptclaude_club/claude-code
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Claude Code Arbitrary Command Execution
The vulnerability of the Claude Code tool arises due to incorrect cleaning of input data. Exploiting this vulnerability allows a remote attacker to compromise confidentiality and execute arbitrary commands...
Claude Code Path Traversal
The vulnerability of the Claude Code code editor is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
CVE-2025-59829
Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the...
EUVD-2025-29501
Malicious code in bioql PyPI...
EUVD-2025-32229
Malicious code in bioql PyPI...
EUVD-2025-31043
Malicious code in bioql PyPI...
EUVD-2025-27564
Malicious code in bioql PyPI...
EUVD-2025-23572
Malicious code in bioql PyPI...
EUVD-2025-19068
Malicious code in bioql PyPI...
EUVD-2025-28585
Malicious code in bioql PyPI...
EUVD-2025-23573
Malicious code in bioql PyPI...
CVE-2025-59829 Claude Code: Permission deny bypass is possible through symlink
Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the...
@4via6/relay (>=1.0.0, <=1.1.3), @axonpush/wizard (>=0.0.1, <=0.0.4) +21 more potentially affected by CVE-2025-59829 via @anthropic-ai/claude-code (>=0.2.14, <=1.0.119)
@anthropic-ai/claude-code NPM version =0.2.14, =1.0.0, =0.0.1, =0.0.55, =2.13.0-canary.3413b9c, =1.0.0, =0.21.0, =0.1.7, =0.0.1, =0.2.0, =0.0.1, =1.8.0, =0.1.34, =1.4.0, =1.8.0, =1.9.0 and more Source cves: CVE-2025-59829 Source advisory: MEND:CVE-2025-59829...