Malicious code in claude-remote-agent (npm)

Source: amazon-inspector 9416d15abb1ba3947af0a74a696052f6b32ec0a1d18a0e753273da4806f534ae claude-remote-agent connects to a hardcoded WebSocket server at wss://claude.pishchykau.eu and exposes the installer's host to remote control. In agent.js, on 'create-session' and 'input' messages the packag...