2 ms·Malware dev tries to steal Claude users secrets NPM slop, leaks own GitHub token2 points by Bender 5mo ago