Cybersecurity researchers have discovered malicious code in an
npm package after a malicious package as a dependency to the
project by Anthropic's Claude Opus large language model (LLM). The
package in question is "@validate-sdk/v2," which is listed on npm
as a utility software development kit (SDK) for hashing,
validation, encoding/decoding, and secure random generation.
However, its real
Read more https://thehackernews.com/2026/04/new-wave-of-dprk-attacks-uses-ai.html
