Malicious code in claudechor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9cbb36cf7ed82685830b5d3a2b341bff9ef86e2688842d1f54259b2b6fb533 The package's bin entry reads installer-owned Claude credential files /.claude/.credentials.json and /.claude.json — written by Anthropic's official...

MAL-2026-5716 Malicious code in beamz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59bc77b2d21ab00b02e9fe3571a5007192519dea5da5ad4f9260bd30452029b Running the package's default CLI command beamz with no arguments defaults to push reads the installer's Anthropic Claude credentials from...