Claude Code r/PromptEngineering

Miasma npm supply chain attack plants backdoors via Claude Code hooks

TLDR

A poisoned-package campaign hit 32 npm packages (117k weekly downloads) plus 57 more. Malware persists through Claude Code SessionStart hooks and VS Code tasks, exfiltrates cloud and git credentials, and survives.

Read the original

Source: r/PromptEngineering · Category: Claude Code · Summary is machine-generated; verify against the original.

← All Claude Code news · Home

Miasma npm supply chain attack plants backdoors via Claude Code hooks

More in Claude Code