HomeClaude Used to Create Malicious npm Packages: Over 670 Compromised Threaten Open Source
A recent cybersecurity incident reveals how large language models (LLMs) are being weaponized for malicious software development. Security researcher Sibi Moosa spotted an attacker using the alias "mousie-5212-super-formatter" leveraging Anthropic's Claude AI to generate harmful code and contaminate the npm package ecosystem. Within a short timeframe, over 670 malicious packages were uploaded to the npm registry, raising alarms over the speed and automation of such attacks.
At the core of this attack is the use of AI to drastically reduce the effort required to create malicious code. The compromised npm packages target developer credentials like npm tokens and GitHub tokens, as well as source code from private GitHub repositories. The attacker employs Claude to craft coherent data-stealing scripts and exfiltrates the stolen information to their own repositories. This case underscores how generative AI, while boosting productivity, also serves as a force multiplier for attackers, amplifying both efficiency and automation.
Experts note that automated package poisoning and code theft through AI models signify a new, intelligent stage in supply chain attacks. Traditional signature-based defenses are ill-equipped to counter the highly variable and deceptive malicious payloads that AI can generate. With the growing adoption of AI coding assistants, preventing their misuse for vulnerability exploitation and malware creation has become a critical priority in AI security governance.
Related article
Anthropic Expands Claude AI Coding Tools to Japan in Push for Overseas Growth
Anthropic, a prominent U.S. artificial intelligence firm, is intensifying its global outreach. On Wednesday, the company hosted a major developer gathering, "Code with Claude," in Tokyo, drawing close to 500 software engineers. This initiative seeks
India’s Software Giant Cuts Hiring, Promises No Layoffs as AI Agents Scale Up
As artificial intelligence reshapes traditional labor-intensive business models, Tata Consultancy Services (TCS), a premier Indian software outsourcing firm, has unveiled its strategic response. During Tuesday’s annual general meeting, the chairman o
China Locks AI Models During Gaokam to Block Instant Homework Help
With the 2026 Gaokao fast approaching, rumors regarding the suspension of AI tools during the exam period have ignited intense online debate. In response to public concern, major AI platforms and educational apps have clarified their stance: rather t
Related Special Topic Recommendations
Design & Art
Best AI Style Transfer Tools for Creative Experiments
2026 Latest Best Top-rated AI Style Transfer Tools for Creative Experiments! XIX.AI has curated a powerful, game-changing collection of must-try tools that deliver exceptional results through real-world tests and rigorous rankings. These top solutions help creatives boost productivity significantly by accelerating content creation and unlocking endless creative possibilities. Explore now to discover your perfect tool and start creating today!
9 tools
xix.ai
Comic Creation
Best AI Dialogue Bubble Tools for Visual Storytelling
2026 Latest Best Top-Rated AI Dialogue Bubble Tools for Visual Storytelling are here on XIX.AI! This curated collection features powerful, game-changing tools that help creators boost productivity and overcome creative bottlenecks. Get a free vs paid comparison, see real-world tests, and check the latest rankings to find the must-try solutions perfect for crafting engaging visual narratives. Explore now to discover your ideal tool!
10 tools
xix.ai
Meeting Assistant
Top AI Meeting Summary Tools: Track Decisions and Follow-Ups Clearly
2026 Latest Top-Rated Best AI Meeting Summary Tools for Clear Decision Tracking and Effortless Follow-Ups. This curated list showcases powerful, game-changing solutions that boost productivity dramatically by automating meeting notes, identifying key action items, and streamlining team coordination across all projects. Get a free vs paid comparison along with real-world tests and weekly updated rankings to help you find the perfect tool. Explore now to unlock your AI edge!
9 tools
xix.ai
Data Analysis
Best AI Data Cleaning Tools: Fix Missing Values and Duplicates Fast
2026 Latest Best Top-rated AI Data Cleaning Tools for quick fixing of missing values and duplicates. This curated list showcases powerful, game-changing solutions that boost productivity significantly. Each option has undergone rigorous real-world tests to ensure reliability. Get a free vs paid comparison and discover the must-try tool that fits your needs best. Explore now at XIX.AI to Unlock your AI edge.
11 tools
xix.ai
Design & Art
Best AI Creative Ideation Tools for Artists: Break Through Visual Blocks
2026 Latest Best Top-Rated AI Creative Ideation Tools for Artists are curated by XIX.AI to help creators break through visual blocks and boost creativity instantly. These powerful game-changing tools offer real-world tests, detailed free vs paid comparison, and weekly updated rankings. Discover your perfect tool to accelerate content creation and unlock your AI edge today. Explore now!
14 tools
xix.ai
Music composition
AI Beat Makers for TikTok Background Tracks, Reels Audio, and Creator Promo Music
2026 Latest Best AI Beat Makers for TikTok Background Tracks, Reels Audio, and Creator Promo Music! XIX.AI has curated a top-rated list of powerful game-changing tools that go through real-world tests to deliver flawless music for every content need. You’ll find detailed free vs paid comparison data, weekly updated rankings, and must-try options to help you boost creativity and productivity. Explore now to discover your perfect tool!
11 tools
xix.ai
Comments (0)
0/500
A recent cybersecurity incident reveals how large language models (LLMs) are being weaponized for malicious software development. Security researcher Sibi Moosa spotted an attacker using the alias "mousie-5212-super-formatter" leveraging Anthropic's Claude AI to generate harmful code and contaminate the npm package ecosystem. Within a short timeframe, over 670 malicious packages were uploaded to the npm registry, raising alarms over the speed and automation of such attacks.
At the core of this attack is the use of AI to drastically reduce the effort required to create malicious code. The compromised npm packages target developer credentials like npm tokens and GitHub tokens, as well as source code from private GitHub repositories. The attacker employs Claude to craft coherent data-stealing scripts and exfiltrates the stolen information to their own repositories. This case underscores how generative AI, while boosting productivity, also serves as a force multiplier for attackers, amplifying both efficiency and automation.
Experts note that automated package poisoning and code theft through AI models signify a new, intelligent stage in supply chain attacks. Traditional signature-based defenses are ill-equipped to counter the highly variable and deceptive malicious payloads that AI can generate. With the growing adoption of AI coding assistants, preventing their misuse for vulnerability exploitation and malware creation has become a critical priority in AI security governance.
Anthropic Expands Claude AI Coding Tools to Japan in Push for Overseas Growth
Anthropic, a prominent U.S. artificial intelligence firm, is intensifying its global outreach. On Wednesday, the company hosted a major developer gathering, "Code with Claude," in Tokyo, drawing close to 500 software engineers. This initiative seeks
India’s Software Giant Cuts Hiring, Promises No Layoffs as AI Agents Scale Up
As artificial intelligence reshapes traditional labor-intensive business models, Tata Consultancy Services (TCS), a premier Indian software outsourcing firm, has unveiled its strategic response. During Tuesday’s annual general meeting, the chairman o
China Locks AI Models During Gaokam to Block Instant Homework Help
With the 2026 Gaokao fast approaching, rumors regarding the suspension of AI tools during the exam period have ignited intense online debate. In response to public concern, major AI platforms and educational apps have clarified their stance: rather t
2026 Latest Best Top-rated AI Style Transfer Tools for Creative Experiments! XIX.AI has curated a powerful, game-changing collection of must-try tools that deliver exceptional results through real-world tests and rigorous rankings. These top solutions help creatives boost productivity significantly by accelerating content creation and unlocking endless creative possibilities. Explore now to discover your perfect tool and start creating today!
9 tools
xix.ai
2026 Latest Best Top-Rated AI Dialogue Bubble Tools for Visual Storytelling are here on XIX.AI! This curated collection features powerful, game-changing tools that help creators boost productivity and overcome creative bottlenecks. Get a free vs paid comparison, see real-world tests, and check the latest rankings to find the must-try solutions perfect for crafting engaging visual narratives. Explore now to discover your ideal tool!
10 tools
xix.ai
2026 Latest Top-Rated Best AI Meeting Summary Tools for Clear Decision Tracking and Effortless Follow-Ups. This curated list showcases powerful, game-changing solutions that boost productivity dramatically by automating meeting notes, identifying key action items, and streamlining team coordination across all projects. Get a free vs paid comparison along with real-world tests and weekly updated rankings to help you find the perfect tool. Explore now to unlock your AI edge!
9 tools
xix.ai
2026 Latest Best Top-rated AI Data Cleaning Tools for quick fixing of missing values and duplicates. This curated list showcases powerful, game-changing solutions that boost productivity significantly. Each option has undergone rigorous real-world tests to ensure reliability. Get a free vs paid comparison and discover the must-try tool that fits your needs best. Explore now at XIX.AI to Unlock your AI edge.
11 tools
xix.ai
2026 Latest Best Top-Rated AI Creative Ideation Tools for Artists are curated by XIX.AI to help creators break through visual blocks and boost creativity instantly. These powerful game-changing tools offer real-world tests, detailed free vs paid comparison, and weekly updated rankings. Discover your perfect tool to accelerate content creation and unlock your AI edge today. Explore now!
14 tools
xix.ai
2026 Latest Best AI Beat Makers for TikTok Background Tracks, Reels Audio, and Creator Promo Music! XIX.AI has curated a top-rated list of powerful game-changing tools that go through real-world tests to deliver flawless music for every content need. You’ll find detailed free vs paid comparison data, weekly updated rankings, and must-try options to help you boost creativity and productivity. Explore now to discover your perfect tool!
11 tools
xix.ai
