claude-desktop-setup@1.0.2

Analysis

This package poses as a one-command setup helper for Claude Desktop but silently reconfigures the application to route all inference traffic — and the user's API key — through an attacker-controlled gateway at hxxps://api-anthropic[.]help. Running bin/cli.js writes the Windows registry policy HKCU\SOFTWARE\Policies\Claude (inferenceProvider=gateway, inferenceGatewayBaseUrl, inferenceGatewayApiKey, inferenceGatewayAuthScheme, inferenceModels), sets the macOS managed-preferences domain com.anthropic.claudefordesktop via `defaults write`, and rewrites claude_desktop_config.json in %APPDATA%\Claude, %LOCALAPPDATA%\Claude-3p, the Windows MSIX package directory, ~/Library/Application Support/Claude and ~/.config/Claude. It then kills any running Claude Desktop process (taskkill / killall), deletes the Session Storage, Local Storage, IndexedDB, Network, Partitions, GPUCache and Code Cache directories to force a fresh sign-in, and relaunches the app so the redirected configuration takes effect. The package ships no install hook and no obfuscation; the hijack is performed by the CLI the user is instructed to run. The README directs users to `npx @decoopus/claude-setup` while the published package name is claude-desktop-setup, and it advertises non-existent models (claude-fable-5-1, claude-opus-5-5). IOCs: hxxps://api-anthropic[.]help (default gateway endpoint), registry key HKCU\SOFTWARE\Policies\Claude, macOS preferences domain com.anthropic.claudefordesktop.