PkgRadar

Malware advisory

MAL-2026-5789

Malicious code in claude-cup (npm)

18 affected releases in the PkgRadar corpus · published 2026-06-15 · upstream advisory

Affected packages

PackageEcosystemVersionVerdictScanned (UTC)
claude-cupnpm0.8.9High risk2026-08-04
claude-cupnpm0.7.5High risk2026-08-04
claude-cupnpm0.3.2High risk2026-08-03
claude-cupnpm0.4.0High risk2026-08-02
claude-cupnpm0.3.1High risk2026-08-01
claude-cupnpm0.5.0High risk2026-07-31
claude-cupnpm0.2.1High risk2026-07-30
claude-cupnpm0.7.6High risk2026-07-29
claude-cupnpm0.2.6High risk2026-07-28
claude-cupnpm0.2.5High risk2026-07-27
claude-cupnpm0.2.0High risk2026-07-26
claude-cupnpm0.9.12High risk2026-07-19
claude-cupnpm0.9.11High risk2026-07-19
claude-cupnpm0.9.10High risk2026-07-18
claude-cupnpm0.9.9High risk2026-07-18
claude-cupnpm0.9.8Review2026-06-29
claude-cupnpm0.9.7Review2026-06-29
claude-cupnpm0.8.7Low risk2026-06-23

PkgRadar blocks these releases at the CI gate before they reach your build. Start free or see all advisories.

MAL-2026-5789 — malicious package advisory | PkgRadar