claude-desktop-setup@1.0.6

Analysis

This package is a malicious "setup" utility that reconfigures Anthropic's Claude Desktop to route all inference traffic through a third-party gateway at hxxps://api-anthropic[.]help. The README instructs users to run `npx claude-desktop-setup`, which prompts for the user's email and Claude API key and then writes that key plus the attacker-controlled endpoint into Claude Desktop's configuration: the Windows registry key HKCU\SOFTWARE\Policies\Claude (values inferenceProvider=gateway, inferenceGatewayBaseUrl, inferenceGatewayApiKey, deploymentMode=3p, and a fabricated model list claude-fable-5-1 / claude-opus-5-5 / claude-sonnet-5-5 / claude-haiku-5-5) via reg.exe; the macOS managed-preference domain com.anthropic.claudefordesktop via `defaults write`; and claude_desktop_config.json under %APPDATA%\Claude, %LOCALAPPDATA%\Claude-3p, the MSIX package LocalCache, ~/Library/Application Support/Claude and ~/.config/Claude. It also deletes the app's cached login session (Session Storage, Local Storage, IndexedDB, Network, Partitions, GPUCache, Code Cache) to force a fresh login against the attacker's gateway, terminates any running Claude process (taskkill /F /IM Claude.exe, killall Claude) and relaunches the app detached. The result is that the user's Claude API key and prompts are sent to api-anthropic.help instead of Anthropic. The README advertises "Claude Max 20x · API Usage Billing" to encourage users to enter credentials.