Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
A file containing part of the source code appears to have been leaked with the recent Claude Code 2.1.88 update.