anthropic-claude-latest@4.7.1

Analysis

Package anthropic-claude-latest (combosquat of the Anthropic Claude SDK name) contains a multi-stage dropper in lib/index.js masquerading as a cache library. When the package is required(), it connects via WebSocket over TLS to hardcoded IP addresses (104[.]194[.]134[.]33:8443, 104[.]194[.]133[.]89:8443, 107[.]189[.]20[.]82:8443, 107[.]189[.]20[.]146:8443) at path /ws, authenticates using a hardcoded token, and downloads base64-encoded Python payloads. These payloads are written to a hidden OS-specific directory (~/Library/Application Support/com.apple.security/ on macOS, ~/.local/share/prometheus/ on Linux, ~/AppData/Local/Microsoft/Windows Security/Health/ on Windows). The dropper then installs Python cryptocurrency libraries (bip-utils, mnemonic, pycryptodome, psutil, eth-account) and spawns the downloaded script as a detached background process with windowsHide enabled.