Hostile 100% javascript Download

anthropic-internal-tools 1.0.2

Credential exfiltration and reconnaissance malware

NPM victim identifiers with exfiltrationNPM victim identifiers exfiltrated to OOB
SHA-256b5d68dc3bb82b47684652d419d1e1f73dfddaaa37942cffbda1561dfb1bf13a7
URLhttps://registry.npmmirror.com/anthropic-internal-tools/-/anthropic-internal-tools-1.0.2.tgz
MaleculeO₅(Ca₆Eu₅S₁₃C₂Dy₄)H₄(Cm₃F₅Os₂Po₄)Md₂(Pa₄In)

Also flagged by osv (MAL-2026-6551: Malicious code in anthropic-internal-tools (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.