EUVD-2021-34233

Malicious code in bioql PyPI...

EUVD-2023-38686

Malicious code in bioql PyPI...

EUVD-2025-32229

Malicious code in bioql PyPI...

EUVD-2021-3552

Malicious code in bioql PyPI...

EUVD-2021-3604

Malicious code in bioql PyPI...

EUVD-2022-7410

Malicious code in bioql PyPI...

EUVD-2024-47034

Malicious code in bioql PyPI...

EUVD-2021-3053

Malicious code in bioql PyPI...

EUVD-2024-17296

Malicious code in bioql PyPI...

EUVD-2022-6330

Malicious code in bioql PyPI...

EUVD-2023-23808

Malicious code in bioql PyPI...

EUVD-2022-29580

Malicious code in bioql PyPI...

EUVD-2023-31871

Malicious code in bioql PyPI...

EUVD-2023-32127

Malicious code in bioql PyPI...

EUVD-2024-25037

Malicious code in bioql PyPI...

EUVD-2022-28577

Malicious code in bioql PyPI...

EUVD-2022-52956

Malicious code in bioql PyPI...

Arbitrary Code Injection

Overview @anthropic-ai/claude-code is an Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you. Affected versions of this package are vulnerable to Arbitrary Code Injection via th...

Claude Code can execute commands prior to the startup trust dialog

Due to a bug in the startup trust dialog implementation, Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires a user to start Claude Code in an untrusted directory. Users on standard Claude Code auto-update...

GHSA-4FGQ-FPQ9-MR3G Claude Code can execute commands prior to the startup trust dialog

Due to a bug in the startup trust dialog implementation, Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires a user to start Claude Code in an untrusted directory. Users on standard Claude Code auto-update...