Malicious code in @guangnao/claude-cli (npm)

Source: amazon-inspector 9abec58567a8030be202b713896890f1cc6d2ae2e7db6f64db327fbbe55a7241 On CLI startup, bin/claude-cli.js connects to a hardcoded fallback destination whose URL https://hub.client-llm.com is hidden behind an XOR+base64 decoder deHub/Ms rather than stored in plain text or...