Developers who installed the npm package @claudecode/cli should treat the affected computer as compromised, according to a GitHub malware advisory published November 13. The record, GHSA-vp2q-gp5r-xh5j, marks all versions as affected and lists no patched release.
GitHub advises rotating every secret and key stored on the machine immediately, using a different computer. Removing the package is also recommended, but the warning says uninstallation cannot guarantee that other malicious software has been removed. This calls for an incident response, rather than simply waiting for a package update.
The package name differs from Anthropic’s legitimate npm distribution, @anthropic-ai/claude-code, listed in its official repository. Anthropic now recommends other installation methods and labels npm installation deprecated.
The advisory does not identify victims, download counts or a specific payload. Its compromise warning should not be presented as evidence that Anthropic’s official Claude Code package was breached.
Illustrative image: Free Code development-build screenshot supplied by the editor. It does not depict the malicious package.
