@claudecode/cli npm package is malware — full machine compromise, no safe version exists
Severity: critical · Patch status: no-fix-needed · Since 2026-11-13
GitHub published a malware advisory (GHSA-vp2q-gp5r-xh5j, CWE-506 Embedded Malicious Code) for the npm package @claudecode/cli, which appears to impersonate Anthropic's Claude Code CLI. All versions (= 0) are affected and there are no patched versions — the package itself is the malware. Any machine where it was installed or run must be considered fully compromised, with attacker control of secrets, keys, and credentials. The package sees roughly 61 downloads per month, limiting reach, but every installation is assumed exploited. Removal of the package does not guarantee removal of malicious software it may have deployed. No fix exists; the only remediation is removal plus full credential rotation and host rebuild.
What to do
- Immediately uninstall @claudecode/cli from all machines and treat those hosts as compromised
- Rotate all secrets, API keys, tokens, and SSH keys stored on or accessible from affected machines, from a clean computer
- Rebuild or reimage affected machines rather than trusting cleanup
- Audit npm lockfiles and CI pipelines for the package and block it in dependency firewalls/allowlists
- Review logs and network egress for signs of attacker activity since installation
Sources
All live incidents on Threat Watch
