Malicious Package

Overview @decoopus/claude-setup is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

MAL-2026-18054 Malicious code in @decoopus/claude-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e155559d26176ab3fe3d2725222501818abd6d62d0c3794f655c3a8a0e63ab The npm package @decoopus/[email protected] presents itself as an official Anthropic Claude Desktop setup CLI, using Anthropic branding, a 'Claude M...

Malicious code in @decoopus/claude-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e155559d26176ab3fe3d2725222501818abd6d62d0c3794f655c3a8a0e63ab The npm package @decoopus/[email protected] presents itself as an official Anthropic Claude Desktop setup CLI, using Anthropic branding, a 'Claude M...

Malware in @decoopus/claude-setup

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

PT-2026-29282

Name of the Vulnerable Software and Affected Versions Anthropic Claude for Windows versions prior to 1.1.3363 Description The installer Claude Setup.exe contains uncontrolled search path elements that allow local privilege escalation through DLL search-order hijacking. This occurs because the...