{"version":1,"type":"story","url":"https://digestai.news/story/github-flags-9-fake-claude-codex-npm-packages","json":"https://digestai.news/story/github-flags-9-fake-claude-codex-npm-packages.json","markdown":"https://digestai.news/story/github-flags-9-fake-claude-codex-npm-packages.md","slug":"github-flags-9-fake-claude-codex-npm-packages","headline":"GitHub flags 9 fake Claude/Codex npm packages","summary":"During the week of 10/17–10/23, Japan experienced several data‑breach incidents. Trustbank, Inc. announced that 4,454,097 member records were accessed from its Furusato Choice site, including names, emails, addresses, phone numbers, hashed passwords and donation amounts. Hankyu Hanshin Department Stores reported that about 1.26 million H2O ID members had their personal data exposed through unauthorized access to its reservation and e‑store systems.\n\nIn addition, GitHub’s Advisory Database listed nine npm packages that mimic official Claude or Codex components, warning that any machine that installed them could be compromised. A separate alert from JPCERT/CC detailed two PHP vulnerabilities (CVE‑2026‑109618, CVE‑2026‑109619) that allow remote code execution; patched versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 were released.\n\nThe incidents highlight the growing risk of password reuse, unpatched software, and AI‑driven attack tools such as ARTEX, which scans for vulnerabilities across many sites.","keyPoints":["4,454,097 records leaked from Furusato Choice","1.26 million H2O IDs exposed by Hankyu Hanshin","GitHub flags 9 fake Claude/Codex npm packages"],"whyItMatters":"These breaches expose millions of personal details, showing how password reuse and unpatched software can be exploited, while AI‑driven tools accelerate the scale of attacks.","category":{"slug":"society","name":"Society & Work","url":"https://digestai.news/category/society"},"entities":{"companies":["Trustbank, Inc.","Hankyu Hanshin Department Stores","Nifty Corporation","SoftBank","GMO Cybersecurity by Ierae","GitHub"],"models":[],"people":[]},"firstPublishedAt":"2026-10-31T04:57:00Z","updatedAt":"2026-10-31T04:57:00Z","sourceCount":1,"hasPrimarySource":false,"sources":[{"outlet":"note.com","title":"[AI Security Weekly Vol. 1] 7 Incidents This Week | Beware of Fake Claude/Codex, 5 Things to Do Tomorrow","url":"https://note.com/rionlab_koba/n/n97423567c8e7?hl=en","publishedAt":"2026-10-31T04:57:00Z","type":"press","primary":false,"lead":true}],"sourceNotes":null,"discussions":[],"thread":null,"cite":{"text":"Digest AI, \"GitHub flags 9 fake Claude/Codex npm packages\", 31 October 2026, https://digestai.news/story/github-flags-9-fake-claude-codex-npm-packages","publisher":"Digest AI","title":"GitHub flags 9 fake Claude/Codex npm packages","datePublished":"2026-10-31T04:57:00Z","url":"https://digestai.news/story/github-flags-9-fake-claude-codex-npm-packages"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}