Claude Code Packaging Error Remains a Lure in an Active Campaign: What Defenders Should Do

April 7, 2026 · Trend Micro · Severity: MEDIUM

Claude Code Packaging Error Remains a Lure in an Active Campaign: What Defenders Should Do. Threat actors leveraged Anthropic’s Claude Code npm release packaging error to distribute Vidar, GhostSocks, and PureLog Stealer. This blog details immediate steps organizations can take and best practices to prevent further risk. Defenders should review their security posture and apply relevant mitigations as needed.