Claude Code leak used to push infostealer malware on GitHub

**Executive summary:** Threat actors are abusing an accidental client-side source code leak of Anthropic's Claude Code (exposed via a published JavaScript source map) to create fake GitHub repositories that deliver the Vidar information-stealing malware, enabling credential and data theft; the report links the leak to active misuse but provides limited indicators and scope.