← Back to Feed
Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads
April 3, 2026 · Trend Micro · Severity: MEDIUM
A packaging error in Anthropic’s Claude Code npm release briefly exposed internal source code.
Key Takeaways
- A packaging error in Anthropic’s Claude Code npm release briefly exposed internal source code.
- how threat actors rapidly weaponized the resulting attention, pivoting an existing AI-themed.