Malicious Package

Overview @chatgptclaudeclub/claude-code is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

EUVD-2025-36128

Malicious code in @chatgptclaudeclub/claude-code npm...

The vulnerability of the Claude Code tool, related to improper cleaning of input data, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Claude Code tool arises due to incorrect cleaning of input data. Exploiting this vulnerability allows a remote attacker to compromise confidentiality and execute arbitrary commands...

The vulnerability of the Claude Code tool, related to incorrect restrictions on the path name to the restricted access catalog, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Claude Code code editor is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-59829

Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the...

EUVD-2025-31043

Malicious code in bioql PyPI...

EUVD-2025-32229

Malicious code in bioql PyPI...

EUVD-2025-19068

Malicious code in bioql PyPI...

EUVD-2025-23573

Malicious code in bioql PyPI...

EUVD-2025-29501

Malicious code in bioql PyPI...

EUVD-2025-27564

Malicious code in bioql PyPI...

EUVD-2025-28585

Malicious code in bioql PyPI...

EUVD-2025-23572

Malicious code in bioql PyPI...

CVE-2025-59829 Claude Code: Permission deny bypass is possible through symlink

Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the...

CVE-2025-59829 Claude Code: Permission deny bypass is possible through symlink

Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the...

CVE-2025-59829 Claude Code: Permission deny bypass is possible through symlink

Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the...

EUVD-2025-32293

Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the...

CVE-2025-59829

CVE-2025-59829 affects Claude Code (Anthropic) prior to version 1.0.120. The root cause is improper handling of symbolic links when evaluating permission-deny rules, enabling a user-denied file to be accessed via a symlink pointing to that file. The issue is fixed in 1.0.120. Impact is exposure o...

@circleci/agents (>=2.13.0-canary.3413b9c, <=2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2025-59829 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.119)

@anthropic-ai/claude-code NPM version =1.0.8, =2.13.0-canary.3413b9c, =0.21.0, =0.1.7, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59829 Source advisory: OSV:GHSA-66M2-GX93-V996...

Claude Code permission deny bypass through symlink

Claude Code failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the file. Users on standard Claude Code auto-update wil...