email

claude@users.noreply.github.com

discovered 2026-04-29

Spoofed git commit author identity used to plant the binary dropper and blend with AI-assistant automation. Also seen across the Shai-Hulud / Mini Shai-Hulud worm family.

Campaigns

Linked packages

Read the full analysis →