ZscalerPublished
Anthropic Claude Code Leak
Excerpt
Anthropic Claude Code Leak | ThreatLabz
By Manisha Ramcharan Prajapati, Jithin Prajeev Nair, Avinash Kumar, Mallikarjun Piddannavar ThreatLabz discovers “Claude Code leak” lure that distributes Vidar and
GhostSocks
While monitoring GitHub for threats, ThreatLabz came across a “Claude Code leak” repository published by idbzoomh (links located in the IOC section). The repository looks like it’s trying to pass itself off as leaked TypeScript source code for Anthropic’s Claude Code CLI. The README file even claims the code was exposed through a .map file in the npm package and then rebuilt into a working fork with “unlocked” enterprise features and no message limits.
The repository link appears near the top of Google results…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Zscaler on zscaler.com.
Mentioned in the excerpt
More from Zscaler6
- msupdater-trojan-and-link-targeted-attacksZscaler · Added 19 Oct
- APT37 Ruby Jumper: Air-Gap Attack via Removable MediaZscaler · Published 26 Feb
- Technical Analysis of 2CLoaderZscaler · Published 30 Sep
- Vidar Virtual Machine-Based String ObfuscationZscaler · Published 21 Sep
