Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.

From the audience, you can barely see a string of fishing line linking one end of the set to the other, though it’s a ...