HomeClaude Used to Create Malicious npm Packages: Over 670 Compromised Threaten Open Source
A recent cybersecurity incident reveals how large language models (LLMs) are being weaponized for malicious software development. Security researcher Sibi Moosa spotted an attacker using the alias "mousie-5212-super-formatter" leveraging Anthropic's Claude AI to generate harmful code and contaminate the npm package ecosystem. Within a short timeframe, over 670 malicious packages were uploaded to the npm registry, raising alarms over the speed and automation of such attacks.
At the core of this attack is the use of AI to drastically reduce the effort required to create malicious code. The compromised npm packages target developer credentials like npm tokens and GitHub tokens, as well as source code from private GitHub repositories. The attacker employs Claude to craft coherent data-stealing scripts and exfiltrates the stolen information to their own repositories. This case underscores how generative AI, while boosting productivity, also serves as a force multiplier for attackers, amplifying both efficiency and automation.
Experts note that automated package poisoning and code theft through AI models signify a new, intelligent stage in supply chain attacks. Traditional signature-based defenses are ill-equipped to counter the highly variable and deceptive malicious payloads that AI can generate. With the growing adoption of AI coding assistants, preventing their misuse for vulnerability exploitation and malware creation has become a critical priority in AI security governance.
Related article
Ando Launches Team Messaging App Bridging Human and AI Collaboration
In 2025, as Sara Du assisted companies in developing MCP servers, a recurring question emerged: how could teams leverage AI agents directly within Slack? The path was obstructed by significant technical barriers, including the complexity of message s
Sequoia-backed Empirik raises $21M to forecast outages before they strike
Before joining Sequoia Capital in 2020 as chief digital and information officer, Avon Puri spent over a decade running infrastructure at Rubrik and VMware. Three years ago, as large language models began showing their true potential, Puri, alongside
OpenAI launches GPT-5.5 Instant as ChatGPT’s new default model
OpenAI launched GPT-5.5 Instant on Monday, replacing GPT-5.3 Instant as the default ChatGPT model. The company states that this update minimizes hallucinations in high-stakes fields like law, medicine, and finance, while preserving the fast response
Related Special Topic Recommendations
Design & Art
Top AI Illustration Tools: Create Editorial Scenes and Cover Art Faster
2026 Latest Top-rated AI Illustration Tools: Our curated list features the best powerfully designed tools for creating stunning editorial scenes and eye-catching cover art quickly. Each option has gone through rigorous real-world tests, offering a free vs paid comparison to help you find the perfect match for your workflow. Try these must-try solutions today to unlock your AI edge and boost your creative productivity. Explore now at XIX.AI.
10 tools
xix.ai
Education and Learning
Top AI Tutors for Exam Prep: Practice Math, Science, and English
2026 Latest Top-Rated Best AI Tutors for Exam Prep are here on XIX.AI! Our curated list features powerful game-changing tools that offer free vs paid comparison, real-world tests, and weekly updated rankings. They help boost your writing efficiency, simplify complex topic learning, and unlock your academic potential. Explore now to Discover your perfect exam prep tool and Start creating today to Unlock your AI edge!
10 tools
xix.ai
Finance
AI Budget Planning Tools for Personal Money Management
2026 Latest Best Top-Rated AI Budget Planning Tools for Personal Money Management are here on XIX.AI! This curated collection features powerful, game-changing solutions that help you conduct real-world tests, understand spending habits, and create personalized plans to boost productivity. Enjoy a free vs paid comparison along with detailed rankings. Must-try tools designed to simplify money management and unlock your AI edge. Explore now!
11 tools
xix.ai
Health & Wellness
AI Sleep Tracking Assistants: Improve Recovery with Better Bedtime Habits
2026 Latest Best Top-Rated AI Sleep Tracking Assistants curated for ultimate recovery. This fully updated weekly guide features powerful tools that deliver real-world tests, free vs paid comparison, and detailed rankings to help you find the must-try solution that boosts sleep quality and supports better bedtime habits. Explore now at XIX.AI to Unlock your AI edge.
10 tools
xix.ai
Data Analysis
AI SQL Copilots for Product and Revenue Analytics
2026 Latest Best Top-Rated AI SQL Copilots for Product and Revenue Analytics! XIX.AI has curated a powerful, game-changing collection of must-try tools that undergo real-world tests through weekly updated rankings. These tools help users boost productivity significantly by accelerating data analysis, streamlining complex queries, and generating accurate insights to drive smarter business decisions. Explore now to Discover your perfect tool for unlocking your AI edge!
14 tools
xix.ai
Education and Learning
Best AI Homework Helpers That Teach: Learn Concepts, Not Just Answers
2026 Latest Best Top-Rated AI Homework Helpers That Teach Core Concepts Not Just Answers Powerful Tools for Students Must-Try Curated List Weekly Updated Free vs Paid Comparison Real-World Tests Accurate Rankings to Help You Unlock Your Full Learning Potential Explore now to Discover your perfect tool for smarter studying.
10 tools
xix.ai
Comments (0)
0/500
A recent cybersecurity incident reveals how large language models (LLMs) are being weaponized for malicious software development. Security researcher Sibi Moosa spotted an attacker using the alias "mousie-5212-super-formatter" leveraging Anthropic's Claude AI to generate harmful code and contaminate the npm package ecosystem. Within a short timeframe, over 670 malicious packages were uploaded to the npm registry, raising alarms over the speed and automation of such attacks.
At the core of this attack is the use of AI to drastically reduce the effort required to create malicious code. The compromised npm packages target developer credentials like npm tokens and GitHub tokens, as well as source code from private GitHub repositories. The attacker employs Claude to craft coherent data-stealing scripts and exfiltrates the stolen information to their own repositories. This case underscores how generative AI, while boosting productivity, also serves as a force multiplier for attackers, amplifying both efficiency and automation.
Experts note that automated package poisoning and code theft through AI models signify a new, intelligent stage in supply chain attacks. Traditional signature-based defenses are ill-equipped to counter the highly variable and deceptive malicious payloads that AI can generate. With the growing adoption of AI coding assistants, preventing their misuse for vulnerability exploitation and malware creation has become a critical priority in AI security governance.
Ando Launches Team Messaging App Bridging Human and AI Collaboration
In 2025, as Sara Du assisted companies in developing MCP servers, a recurring question emerged: how could teams leverage AI agents directly within Slack? The path was obstructed by significant technical barriers, including the complexity of message s
Sequoia-backed Empirik raises $21M to forecast outages before they strike
Before joining Sequoia Capital in 2020 as chief digital and information officer, Avon Puri spent over a decade running infrastructure at Rubrik and VMware. Three years ago, as large language models began showing their true potential, Puri, alongside
OpenAI launches GPT-5.5 Instant as ChatGPT’s new default model
OpenAI launched GPT-5.5 Instant on Monday, replacing GPT-5.3 Instant as the default ChatGPT model. The company states that this update minimizes hallucinations in high-stakes fields like law, medicine, and finance, while preserving the fast response
2026 Latest Top-rated AI Illustration Tools: Our curated list features the best powerfully designed tools for creating stunning editorial scenes and eye-catching cover art quickly. Each option has gone through rigorous real-world tests, offering a free vs paid comparison to help you find the perfect match for your workflow. Try these must-try solutions today to unlock your AI edge and boost your creative productivity. Explore now at XIX.AI.
10 tools
xix.ai
2026 Latest Top-Rated Best AI Tutors for Exam Prep are here on XIX.AI! Our curated list features powerful game-changing tools that offer free vs paid comparison, real-world tests, and weekly updated rankings. They help boost your writing efficiency, simplify complex topic learning, and unlock your academic potential. Explore now to Discover your perfect exam prep tool and Start creating today to Unlock your AI edge!
10 tools
xix.ai
2026 Latest Best Top-Rated AI Budget Planning Tools for Personal Money Management are here on XIX.AI! This curated collection features powerful, game-changing solutions that help you conduct real-world tests, understand spending habits, and create personalized plans to boost productivity. Enjoy a free vs paid comparison along with detailed rankings. Must-try tools designed to simplify money management and unlock your AI edge. Explore now!
11 tools
xix.ai
2026 Latest Best Top-Rated AI Sleep Tracking Assistants curated for ultimate recovery. This fully updated weekly guide features powerful tools that deliver real-world tests, free vs paid comparison, and detailed rankings to help you find the must-try solution that boosts sleep quality and supports better bedtime habits. Explore now at XIX.AI to Unlock your AI edge.
10 tools
xix.ai
2026 Latest Best Top-Rated AI SQL Copilots for Product and Revenue Analytics! XIX.AI has curated a powerful, game-changing collection of must-try tools that undergo real-world tests through weekly updated rankings. These tools help users boost productivity significantly by accelerating data analysis, streamlining complex queries, and generating accurate insights to drive smarter business decisions. Explore now to Discover your perfect tool for unlocking your AI edge!
14 tools
xix.ai
2026 Latest Best Top-Rated AI Homework Helpers That Teach Core Concepts Not Just Answers Powerful Tools for Students Must-Try Curated List Weekly Updated Free vs Paid Comparison Real-World Tests Accurate Rankings to Help You Unlock Your Full Learning Potential Explore now to Discover your perfect tool for smarter studying.
10 tools
xix.ai
