2 ms·
>Claude Code also uses Axios for HTTP. Interesting based on the other news that is out.
by pixl97 7mo ago
>Claude Code also uses Axios for HTTP.
Interesting based on the other news that is out.
- alex000kim 7mo agoOh right, I just saw https://news.ycombinator.com/item?id=47582220 https://news.ycombinator.com/item?id=47582220 will update the post with this link
- greenavocado 7mo agoWhat version?
- Stagnant 7mo ago1.13.6, so should not be affected by the malware
- chuckadams 7mo agoThe exploit is a postinstall hook, so CC users would be unaffected. Claude Code itself is most likely built with bun and not npm, so the CC developers would also be immune.
- JamesSwift 7mo agoWell, technically bun doesnt _prevent_ hooks. It just requires opting into them. And even that also includes a default set of pre-whitelisted packages. A much better system, but not perfect. And actually just looking this up, it appears claude-code itself was just added to that whitelist : D https://github.com/oven-sh/bun/commit/5c59842f78880a8b5d9c2eb99c8928fc2ec50a2d#diff-7e3eaf75f193213fd44b6999d829204afa092994d80807c890bb5b578d0ae95d https://github.com/oven-sh/bun/commit/5c59842f78880a8b5d9c2e...
- username44 7mo agoJust to corroborate sibling comments, I checked my Claude Code VM (native install) for the IOC and it does not appear infected.