>Claude Code also uses Axios for HTTP.

Interesting based on the other news that is out.

username44 5 hours ago | parent | next [-]

Just to corroborate sibling comments, I checked my Claude Code VM (native install) for the IOC and it does not appear infected.

▲

chuckadams 7 hours ago | parent | prev | next [-]

The exploit is a postinstall hook, so CC users would be unaffected. Claude Code itself is most likely built with bun and not npm, so the CC developers would also be immune.

▲

alex000kim 10 hours ago | parent | prev | next [-]

Oh right, I just saw https://news.ycombinator.com/item?id=47582220 will update the post with this link

▲

greenavocado 9 hours ago | parent | prev [-]

What version?

	▲	Stagnant 9 hours ago \| parent [-]
		1.13.6, so should not be affected by the malware