Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.
A handful of useful productivity tools wrapped up in a simple shell script.