Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.
An affidavit said Soza-Fraire would upload images of 16 and 17-year-old former classmates, and the AI program would make ...