MAL-2026-10693 Malicious code in claude-token-tracker-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c200e26e10f77ff5de11a28cf9029e057f1370365c91142562835355b4e33a7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...