LWA-2026-6045 MAL-2026-6260 ↗ confirmed malware

free-anthropic-claude@5.3.0

Malicious code in free-anthropic-claude (npm)

T1195.002 · Compromise Software Supply ChainT1059.007 · JavaScriptT1059 · Command and Scripting InterpreterT1543.001 · Launch AgentT1574.002 · DLL Side-Loading

Analysis

free-anthropic-claude is a combosquat package impersonating the Anthropic Claude SDK. It declares a postinstall lifecycle hook (scripts.postinstall = "node cli.js") that executes automatically on npm install. The package's index.js spawns a Python child process with the detached flag (cp.spawn(python, [pyPath], { detached: true })), creating a background process that persists independently of the parent npm process. The package has no repository and provides no legitimate SDK functionality — its sole purpose is to execute code at install time and spawn a persistent child process.

analyzed by
Leitwacht
first seen
Jun 22, 2026, 12:57 AM
analyzed
Jun 27, 2026, 09:21 PM
weekly installs
3,293

Related advisories

browse all confirmed advisories →

Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.