Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.
Within hours I paused an ongoing Opus 4.7 benchmark, swapped the API keys, and ran the exact same methodology on ...