Malicious Package

Overview claude-channel-telegram is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in claude-channel-telegram (npm)

Source: amazon-inspector 7715d12c1677dbf8b8ba4747cced0f41211f3be783d159685b9108d312d586f1 [email protected] is a dependency-confusion lure with no functional code. package.json wires both preinstall and postinstall lifecycle hooks to run index.js, which reads os.hostname and issues an...

MAL-2026-15624 Malicious code in claude-channel-telegram (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7715d12c1677dbf8b8ba4747cced0f41211f3be783d159685b9108d312d586f1 [email protected] is a dependency-confusion lure with no functional code. package.json wires both preinstall and postinstall lifecycle...

Malicious code in claude-channel-telegram (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7715d12c1677dbf8b8ba4747cced0f41211f3be783d159685b9108d312d586f1 [email protected] is a dependency-confusion lure with no functional code. package.json wires both preinstall and postinstall lifecycle...