Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...

The source code of Anthropic's CLI tool Claude Code was accidentally made publicly accessible via a source map in the npm ...