Hackers Weaponize Claude Code Leak to Spread Vidar and GhostSocks Malware

A public packaging error exposed Anthropic's Claude Code TypeScript source, which was rapidly mirrored and forked; attackers are using fake repositories as lures that deliver a Rust dropper installing the Vidar info-stealer and GhostSocks proxy. The leak increases supply-chain risks by allowing precise exploitation and social-engineering against developers; organizations are advised to avoid running untrusted leaked code, enforce signed binaries, apply zero trust segmentation, and monitor for anomalous connections and unexpected packages.