Malicious Claude Code Packages Discovered Delivering Hidden Crypto Miners

Security researchers have uncovered malicious packages masquerading as official or complementary utilities for Anthropic's Claude Code CLI. These weaponized packages abuse developer trust during installation, executing stealthy post-install scripts that deploy background cryptocurrency miners and beacon back to rogue command-and-control servers.\n\nOur latest developer security advisory breaks down the infected package names, supply chain attack mechanics, and immediate remediation steps to sanitize developer workstations.\n\nRead the full technical security breakdown on our official security portal.