GitHub flags 9 fake Claude/Codex npm packages
During the week of 10/17–10/23, Japan experienced several data‑breach incidents. Trustbank, Inc. announced that 4,454,097 member records were accessed from its Furusato Choice site, including names, emails, addresses, phone numbers, hashed passwords and donation amounts. Hankyu Hanshin Department Stores reported that about 1.26 million H2O ID members had their personal data exposed through…
Key points
- 4,454,097 records leaked from Furusato Choice
- 1.26 million H2O IDs exposed by Hankyu Hanshin
- GitHub flags 9 fake Claude/Codex npm packages
In addition, GitHub’s Advisory Database listed nine npm packages that mimic official Claude or Codex components, warning that any machine that installed them could be compromised. A separate alert from JPCERT/CC detailed two PHP vulnerabilities (CVE‑2026‑109618, CVE‑2026‑109619) that allow remote code execution; patched versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 were released.
The incidents highlight the growing risk of password reuse, unpatched software, and AI‑driven attack tools such as ARTEX, which scans for vulnerabilities across many sites.
[AI Security Weekly Vol. 1] 7 Incidents This Week | Beware of Fake Claude/Codex, 5 Things to Do Tomorrow
note.com · 31 October 2026
Loading the full article…
This text was published by note.com and written by コバ@１個人事業から１ヶ月でベトナム起業. It is reproduced here with attribution so you can read it in full; the rights remain with the publisher. Read it at the source ↗
The headline, key points and digest above were generated by Digest AI's editorial model from the linked sources. Automated summaries can contain errors: the sources are the record. Spotted a mistake? Tell us. Published by Martin K., who runs Digest AI and handles corrections.
More in Society & Work
All →- Richard Dawkins says AI arrived in his lifetime with a vengeance · 1 src
- Hikers face risks as AI chatbots provide wrong trail advice · 1 src
- Former Google engineer stopped saving for retirement over AI fears · 1 src
- AI chatbots rely on obscure voter sites for election answers, report says · 1 src
- Elon Musk contrasts his diet with OpenAI, Anthropic and Google CEOs · 1 src
Comments
via GitHub Discussions