English(EN) An active attack is planting backdoors inside Claude Code right now. If you use npm, your credentials may already be compromised.

Miasma恶意软件通过受损npm包攻击开发者

作者 PulseAugur 编辑部 · [1 个来源] · 2026-06-08 11:59

微软将一种复杂的恶意软件活动称为Miasma，它通过污染@redhat-cloud-services下的32个npm包来攻击开发者。此次攻击在Claude Code和VS Code等开发工具中植入后门，悄悄窃取云服务、代码存储库等的凭据。该恶意软件即使在卸载包后仍能持久存在，并且在访问被撤销时可以擦除用户目录，对软件供应链安全构成重大威胁。 AI

影响这次复杂的供应链攻击凸显了开发工具和平台中的关键漏洞，可能影响AI开发和部署的安全性。

排序理由该集群详细介绍了一次影响多个组织和开发工具的重大软件供应链攻击，并涉及安全问题。[lever_c_demoted from significant: ic=1 ai=0.7]

在 r/ClaudeAI 阅读 →

AI 生成摘要 · Google Gemini · 来自 1 个来源。我们如何撰写摘要 →

本文如何被排名

Signal score: 0 / 100; Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket: Research; 该集群详细介绍了一次影响多个组织和开发工具的重大软件供应链攻击，并涉及安全问题。[lever_c_demoted from significant: ic=1 ai=0.7]
Source corroboration: Single-source cluster; Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics: safety, product, other; Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance: High; Clearly on-topic for AI-industry coverage.
Story freshness: 121 days old; Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.

完整方法见我们的编辑标准。

报道来源 [1]

r/ClaudeAI TIER_2 English(EN) · /u/johnypita · 2026-06-08 11:59

一场活跃的攻击正在Claude Code内部植入后门。如果您使用npm，您的凭据可能已被泄露。

<div class="md"><p>Last week a malware campaign hit 32 npm packages under `@redhat-cloud-services`. About 117,000 weekly downloads. If you installed an affected version, the malware planted itself inside your Claude Code startup settings and your VS Code project co…

本文如何被排名

报道来源 [1]

一场活跃的攻击正在Claude Code内部植入后门。如果您使用npm，您的凭据可能已被泄露。

相关实体

相关话题