An npm Package Just Tried to Steal Your Claude AI Files — Then the Attacker Leaked His Own GitHub Token by Accident
A malicious npm package 'mouse5212-super-formatter' targeted Claude AI users, stealing files from Anthropic's data directory. The attacker used AI to…