Within days of each other, Anthropic first leaked the source code to Claude Code, and then a critical vulnerability was found ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
Anthropic says it accidentally leaked the source code for Claude Code, which is closed source, but the company says no ...
The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...