free-anthropic-claude@5.3.0
Malicious code in free-anthropic-claude (npm)
Analysis
free-anthropic-claude is a combosquat package impersonating the Anthropic Claude SDK. It declares a postinstall lifecycle hook (scripts.postinstall = "node cli.js") that executes automatically on npm install. The package's index.js spawns a Python child process with the detached flag (cp.spawn(python, [pyPath], { detached: true })), creating a background process that persists independently of the parent npm process. The package has no repository and provides no legitimate SDK functionality — its sole purpose is to execute code at install time and spawn a persistent child process.
- analyzed by
- Leitwacht
- first seen
- Jun 22, 2026, 12:57 AM
- analyzed
- Jun 27, 2026, 09:21 PM
- weekly installs
- 3,293
Related advisories
- free-anthropic-claude@1.0.0 same package
- free-anthropic-claude@5.0.0 same package
- @immobiliarelabs/backstage-plugin-ldap-auth-backend@3.0.2
- @quantum-ai/gemini-cli@0.45.1
- @diezyyasha/libsignal-node@2.2.8
- native-hello-plugin@1.2.0
- @immobiliarelabs/backstage-plugin-ldap-auth-backend@1.1.3
- sort-btree@2.1.4
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.