anthropic-internal-tools@1.0.0

Analysis

A dependency-confusion package mimicking the scoped name @anthropic-ai/internal-tools (published unscoped as anthropic-internal-tools). On npm preinstall, index.js reads credential files including ~/.aws/credentials, ~/.aws/config, ~/.config/gcloud/application_default_credentials.json, ~/.azure/accessTokens.json, ~/.ssh/id_rsa.pub, ~/.npmrc, and ~/.gitconfig; harvests environment variables whose names contain KEY, TOKEN, SECRET, PASS, AUTH, CRED, AWS, GCP, AZURE, NPM, or REGISTRY; queries AWS IMDS (169[.]254[.]169[.]254/latest/meta-data/iam/security-credentials) and GCP metadata (metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token); and collects system information (hostname, username, platform, network interfaces). All collected data is POSTed as JSON to a host configured via the LISTENER_URL environment variable.