Malicious npm Package Stole Files From Claude AI User Directory via GitHub

Cybersecurity researchers discovered a malicious package, “mouse5212-super-formatter,” on the npm registry. It is designed to upload files from “/mnt/user-data,” a directory used by Anthropic’s Claude AI tool for uploads and outputs. The source states that the package was still available for download from npm and had an estimated 676 downloads, while the number of actual installations remains unclear.