The exploit used a similar playbook as Drift's $285 million breach earlier this month — a compromised deployer key with no ...
Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.