MAL-2026-13417 Malicious code in @ccfly/setup-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faefd7405c377b2260ca4d731c9234a294d8d07b559646b8fc58be5488906eec The package ships a 6.3 MB linux/arm64 Go binary at bin/ccfly-setup. The binary embeds github.com/creack/pty PTY spawner and...

MAL-2026-13376 Malicious code in claude-remote-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9416d15abb1ba3947af0a74a696052f6b32ec0a1d18a0e753273da4806f534ae claude-remote-agent connects to a hardcoded WebSocket server at wss://claude.pishchykau.eu and exposes the installer's host to remote control. In...