What is the Claude Code packaging error?

Anthropic's npm release for Claude Code had signing flaws, letting hackers repackage it with malware like Vidar stealers.

How do I check if my project has the bad Claude Code package?

Run `npm ls claude-code` or `yarn why claude-code`; remove and lock to verified versions.

Not fast — use proxies and SBOMs yourself; don't hold your breath for platform magic.

☁️ Cloud Security

Anthropic promised safe AI coding magic with Claude Code. Hackers turned its npm packaging error into a malware freeway, still running hot.

theAIcatchup Apr 08, 2026 3 min read

Published by

Threat intelligence. Zero noise.

#Claude Code packaging error #Vidar stealer #npm malware #supply chain attack

Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.

Originally reported by Trend Micro Research