Malicious npm package @claudecode/cli impersonates Claude Code CLI

GitHub's Advisory Database published a critical security advisory on November 13, 2026, warning that the npm package @claudecode/cli is malware impersonating Anthropic's official Claude Code CLI. According to GitHub's security advisory, any host where the package was installed or run should be treated as fully compromised.

The advisory's key details

• Tracked as GitHub Security Advisory GHSA-vp2q-gp5r-xh5j and OSV ID MAL-2026-19243, classified Critical / Malware.
• The malicious package is published under the name @claudecode/cli, impersonating Anthropic's official Claude Code CLI package.
• GitHub's advisory states that installing or running the package should be treated as full host compromise.
• No patched version of the package exists; the only listed mitigation is removal and non-use.
• The advisory was published to the npm ecosystem on November 13, 2026.

Why this matters for AI builders

Developers who install AI coding-agent tooling without verifying the exact official package name risk full machine compromise. This is a direct supply-chain threat against Claude Code's large developer user base, since a single typo or confusion over naming can hand an attacker complete control of a development machine.

What to do now

• Rotate all credentials and tokens from a separate, uncompromised device.
• A standard uninstall does not guarantee removal of all malicious artifacts; a full system rebuild may be required.

Sources

• @claudecode/cli malicious package (GitHub Advisory Database, November 13, 2026, official)

Written with AI assistance, strictly from the sources listed above. Before it went live, automated checks verified its dates, sources and every language edition.