Malicious code on public repositories

RevStealer spread via fake free Claude Opus 5 desktop build on GitHub

Morphisec says a repo posing as a free Anthropic model delivers a Windows infostealer that keeps a spare command server address in a Polygon smart contract, so taking the primary host down does not end operator control.