Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.

A client calls in the lead up to April 5th to say they’ve withdrawn from their flexible ISA and while they’d fully intended ...