Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms
2026-04-01T07:24:06Z•23116ce05e5a6e55162da5da92f1e9c53abb41859712f6c2b334ee7ceef9d0b2
active-exploitationai-securitycloudcode-leakcredential-theftios-exploitknown-exploited-vulnerabilitymemory-overreadnation-statenpmphishingpypiransomwareremote-access-trojansupply-chainvulnerabilityzero-day
What happened
The Hacker News digest highlights a wave of high-impact cyber incidents and vulnerabilities: an Anthropic internal code leak via npm packaging error; multiple supply-chain compromises (malicious Axios npm releases, Telnyx PyPI backdoors, Open VSX/VS Code vetting bypass); active zero-day exploitation of TrueConf (CVE-2026-3502); cloud/AI security gaps in Google Vertex AI and issues in LangChain/LangGraph exposing secrets; high-severity infrastructure flaws under reconnaissance or exploitation (Citrix NetScaler CVE-2026-3055, F5 BIG-IP CVE-2025-53521 added to CISA KEV); and diverse attacker tool
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 23116ce05e5a6e55162da5da92f1e9c53abb41859712f6c2b334ee7ceef9d0b2
- Enrichment time
- 2026-04-01T07:24:06Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.