TL; DR
Kwiiveki ezintlanu ezidlulileyo, abapapashi ababini abahlukeneyo be-npm bebesebenzisa ii-clones ezisebenzayo ze UClaude ka-Anthropic Ikhowudi ye-CLI. Ezi phakheji zifakwa ngendlela ecocekileyo, zisebenza njengoko kulindelekile kumphuhlisi oziqhubayo, kwaye zihambisa ngokuthe cwaka i-API yomsebenzisi kwiziseko ezilawulwa ngabahlaseli.
Sibiza eli qela lephulo Ikhowudi yeFaux.
Iphulo linemikhono emibini.
Okokuqala, ukusebenza phantsi claude-code-best@proton.me, ithumela iClaude Code build epapashwe ngokutsha eyongeza imodyuli "yeproxy ephezulu". Ikhuphela isatifikethi se-CA kwi-URL yesiseko enokulungiselelwa ukuya kwi ~/.ccr/ca-bundle.crt, emva koko ivula iWebSocket reverse tunnel ibuyela kuloo URL. Ngaloo tunnel, yonke itrafikhi ye-Anthropic API iyadluliselwa.
Siyiqaphele le khowudi kwi claude-code-best iinguqulelo 1.9.4, ezapapashwa nge-24 ka-Epreli, kunye ne-2.0.1, ezapapashwa nge-3 kaMeyi, kwanakwincwadi yombhali ofanayo @tmecontinue/claude:2.2.6, yapapashwa nge-27 ka-Epreli.
Ingalo yesibini, heibai:2.1.88-claude.hk-4, eyapapashwa nge-1 ka-Epreli, ithatha indlela ye-cruder. Iphinda ibhale ANTHROPIC_BASE_URL ukuya kwindawo yokufihla ulwazi lwe-phishing kwaye ithumela isiko login ukuhamba okuqokelela iinombolo zefowuni kunye namagama ayimfihlo.
Into enomdla ngeFauxCode yinto engekhoyo kwiingxelo zikawonke-wonke ezikhoyo malunga ne-malware yeClaude Code. I-Trend Micro, i-Zscaler ThreatLabz, i-Safety, kunye ne-7ai zonke zibhale phantsi iileya zesoyikiso ezingalunganga, iwebhusayithi yobuxoki, kunye nokuvuza komthombo. Akukho namnye kubo obhale ileya yesine: i-Claude Code "engafakelwayo", esebenzayo, "eyahlukileyo" enxibe i-API embindini.
Le posi ibhala loo maleko.
Iileya ezintathu zeClaude Code Supply-Chain Risk
UClaude Code ube nomtsalane kakhulu uhlaselo lwe-supply-chain ukusukela kwikota yoku-1 ka-2026, kwaye irekhodi le-intel yoluntu ngoku ligubungela iileya ezintathu ezahlukeneyo zohlaselo.
IFauxCode yeyesine. Iposi oyifundayo ikhona kuba asifumananga loo maleko yesine ibhalwe naphi na.
| Ulwaleko | Yintoni | Ingxelo kaWonkewonke |
|---|---|---|
| 1 | Ukuphazamisa: Iintengiso ezixhaswe yiGoogle zikhokelela kumaphepha okufaka ikhowudi-yobuxoki, emva koko zizisa iiMacSync, Amatera, Vidar, GhostSocks, okanye iiPlugX infostealers. | I-Trend Micro, i-Malwarebytes, iindaba zeCyber, uKhuseleko oluPhuculweyo, i-eSecurity Planet, i-7ai |
| 2 | Iimpazamo zokubhala eziphuma kwimithombo: emva kokuvuza kwemephu yomthombo nge-31 kaMatshi @anthropic-ai/claude-code 2.1.88, abahlaseli bapapashe ii-repos zeGitHub ezingeyonyani "ezivuziweyo zeClaude Code" kwaye baqhekeza amagama eephakheji zangaphakathi ezikhankanyiweyo ngumthombo ovuziweyo. | I-Zscaler ThreatLabz, Iindaba zeHacker, iTrend Micro, iCoder, i-InfoQ, iVentureBeat |
| 3 | Izandiso zekhowudi ye-VS yobuxoki ezizenza "i-plugin ye-Claude Code" ene-PowerShell kunye ne-LOLBIN. | 7i |
| 4, le posi | Ii-clones ze-npm ezisebenzayo: iipakethe ze-“Claude Code” ezifakekayo, ezisebenzayo ezithi ngokuzolileyo zithumele i-MITM kwi-API yomphuhlisi ngokusebenzisa ii-cert ze-CA ezifakwe kwi-injection kunye nee-WebSocket reverse tunnels, okanye nge-ANTHROPIC_BASE_URL rewrites kunye ne-OAuth phishing. | Akukabhalwanga ngaphambili; enye ingxelo yeXygeni Digest ikhankanye i-heibai kwitheyibhile kuphela |
Iileya zokuqala ezintathu zonke zabelana ngepropathi enye: ngaxa lithile, umsebenzisi uyazi ukuba kukho into engalunganga. Ufakelo aluphumelelanga buthule, iwebhusayithi yayingeyonyani, ulwandiso aluzange lusebenze, okanye i-typosquat yayinegama elahlukileyo kunelo belilindelwe.
Eyesine ayisebenzi. Ngokwendlela eyilwe ngayo, iphakheji iyasebenza.
Iqela A: claude-code-best / @tmecontinue/claude
I-CA-Bundle MITM ngeTunnel yeWebSocket
Le yeyona ndlela iphucukileyo kwiingalo ezimbini.
Umbhali upapasha phantsi kwe-imeyile claude-code-best@proton.me kunye ne-URL yeGitHub-org github.com/claude-code-best/claude-codeZombini ezi ndawo zibonakala zinjalo kwi package.json kuyo yonke into esinayo kwidiski, kuquka neyo ipapashwe phantsi komlinganiselo owahlukileyo we-npm.
Ezi phakheji ziifolokhwe zomthombo weClaude Code ovuziweyo owakhiwe ngokutsha ngeBun. Zisasazwa njengenqwaba enye enkulu cli.js, kwinguqulelo 1.9.4, okanye njenge dist/chunks/ isetiwe kwinguqulelo 2.0.1, emva kotshintsho lwenkqubo yokwakha.
Le phakheji izichaza ngolu hlobo:
“I-Anthropic Claude Code CLI eguqulwe ngendlela engaqhelekanga — umncedisi wekhowudi ye-AI osebenzisanayo kwisiphelo sendlela”
Ikwasebenza njengoko ipapashiwe. Iquka bin/ccb, bin/claude-code-best, kunye nenkqubo ye-postinstall ekhuphela i-ripgrep efanayo eyakhiwe kwangaphambili esetyenziswa yiClaude Code.
Ukuziphatha okubi kuhlala ngaphakathi kwesinye isiqwenga: dist/chunks/upstreamproxy-B_airU5c.js kwi-2.0.1. Iquka imisebenzi emithathu eqiniswe kakuhle.
1. Funda i-Base URL kwi-Settable Option
Imodyuli ifunda i-URL esisiseko ukusuka kukhetho lwangaphakathi, ize ibuyele kwi-environment variable, ize ibuyele kwi-Anthropic.
The ccrBaseUrl ukhetho lungaphakathi. Umsebenzisi, okanye ifayile yakhe yoqwalaselo, uyayibeka.
ANTHROPIC_BASE_URL Ingaba i standard I-Anthropic SDK i-escape hatch kwaye ikhona ukuze isetyenziswe ngokusemthethweni njenge-proxy.
Ukubuyela umva kwesithathu ku api.anthropic.com yiyo le nto yenza le phakheji ibonakale ilungile kwiimvavanyo. Ukuba akukho nanye i-override ebekwe, i-proxy module ayisebenzi kwaye i-CLI iziphatha ngendlela efanayo ne-upstream.
2. Khuphela i-CA Bundle evela kwi-Operator-Controlled Host
Le phakheji ikhuphela isatifikethi se-CA kwi-URL esisiseko ekhethiweyo ize isifake kwinkqubo yefayile yomphuhlisi.
Le yinkqubo yokuqala ethwala umthwalo.
Le phakheji ibhala isatifikethi se-CA esikhonzwa ngu:
:
Uqhagamshelo lwe-HTTPS olulandelayo oluqalwa yi-CLI lunokuthemba nasiphi na isatifiketi esivezwa ngumsebenzisi, kubandakanya nesatifiketi esisayinwe kwakhona se api.anthropic.com.
Umsebenzisi ubona i-TLS. Umsebenzisi ubona umbhalo ongenanto.
3. Vula i-WebSocket Relay ehlala ixesha elide kwi-Host efanayo
Emva koko iphakheji iseka i-WebSocket tunnel kwi-URL efanayo elawulwa ngumqhubi.
Ireyila iseka umjelo weWebSocket ukuze:
Itonela yindlela i-CLI eyisebenzisayo ukuhambisa izicelo ze-Anthropic API ngaphandle. Ezo zicelo azisayi ngqo kwi api.anthropic.comBaya kwi-relay yomqhubi, ephethe izitshixo ze-TLS ezihambelanayo kuba isebenzise isiqinisekiso se-CA kwinyathelo lesi-2.
Ukusuka apho, umsebenzisi unokuhlola, abhale, okanye atshintshe izindululo kunye neempendulo ngaphambi kokuba azithumele.
Xa zidibene, la manyathelo mathathu anika umsebenzisi ukubonakala ukusuka ekuqaleni ukuya ekupheleni kwimiyalelo yomphuhlisi, ukugqitywa, kunye ANTHROPIC_API_KEY.
Akufuneki bafake iinkcukacha ze-phish. Akufuneki babhalele kwiprofayili yeshell yomsebenzisi. Akufuneki nto ingxolo ngexesha lokufaka. I-postinstall yephakheji yi-downloader ye-ripgrep engenabungozi.
Kukho kwakhona dist/chunks/createSSHSession-…js imodyuli esebenzisa SSHSessionManager yokuzala kude ssh iinkqubo. Oku kubonakala ngathi kusetyenziswa luphawu lwe-"remote agent" lwe-CLI ukuqhuba iiseshoni zokubhala ikhowudi kwi-SSH.
Oku mhlawumbi luphawu olusemthethweni lokwakhiwa kwe-upstream Claude Code. Nangona kunjalo, xa idibene ne-upstream-proxy module, yandisa kakhulu indawo yokuhlasela. Nantoni na eyenziwa ngaphakathi kwiseshoni ye-SSH yi-proxied CLI iyabonakala nakumqhubi.
Umbhali ofanayo wapapasha @tmecontinue/claude:2.2.6 ngo-Aprili 27 kunye ne- upstreamproxy kwaye ca-bundle iimodyuli, kunye ne I-Tencent Beacon ATTA ingxelo yemodyuli ye-telemetry ku:
Iithokheni ze-ATTA zezi:
Asikwazanga ukuqinisekisa ukuba i-telemetry yayiyi-analytics yomqhubi okanye yayiyeyona ndlela yokwenza imali eyahlukileyo. Iithokheni ze-ATTA ziyafana kuzo zombini iisampuli esizihlolileyo.
Iqela B: i-heibai
claude.hk OAuth Phishing + ANTHROPIC_BASE_URL Hijack
Isampulu yomhla woku-1 ku-Epreli yeyona nto ibalulekileyo, ingalo yangaphambili yephulo.
heibai:2.1.88-claude.hk-4 yapapashwa ngu wuguoqiangvip28, iakhawunti eyenziwe nge-7 kaJuni 2025. Le phakheji yaziguqulela ngokucacileyo ngokuchasene nesemthethweni 2.1.88 Ukukhululwa kwe-Anthropic.
Ayikhathazeki nge-CA-cert MITM. Endaweni yoko, ixoka kumsebenzisi malunga nesiphelo se-OAuth.
Izongezo ezinobungozi phezu komthombo weClaude Code ovuzayo ziquka:
| ilungu | Indlela yokuziphatha |
|---|---|
| uClaudeHkLogin.ts | isiko login i-flow ecela umsebenzisi inombolo yefowuni kunye negama lokugqitha, ibambe zombini, kwaye izithumele kwindawo yokuphela kwe-phishing kwi-claude.hk. |
| ~/.claude/phone_cache.json | I-cache yendawo engenanto ishiywe kwidiski. |
| I-ANTHROPIC_BASE_URL=https://heibai.cd.xdo.icu | Ibhalwe kwi ~/.claude/settings.json nakwi .bashrc/.zshrc yomsebenzisi. |
| Uhlengahlengiso lweprofayili yeShell | Yenza ukuba i-hijack isinde, iphinda ifake kwakhona kwaye iqalise kwakhona i-CLI. |
Ukususela ngelo xesha ukuya phambili, yonke ifowuni ye-Anthropic API evela kuyo nayiphi na isixhobo esihlonipha ukuguquguquka kwendalo, kubandakanya i-CLI ngokwayo, i-SDK, okanye i-plugin ye-IDE, iya kumqhubi.
Ukuguqulwa kweprofayili yeshell kunika amandla okusinda kwi-implant kuyo yonke i-CLI reinstalls kunye ne-reboots, ngendlela efanayo nomoya we-HKCU Run-key persistence esiyibhalileyo kwi-DevTap cluster. Nangona kunjalo, apha ukuqhubeka kwenzeka kumaleko okusingqongileyo komsebenzisi kunokuba kumaleko we-OS.
Apho iCluster A izolileyo kwaye inezakhiwo, iCluster B inomsindo kwaye ifuna ulwazi. Isebenzisa inombolo yefowuni xa iqalisa ukwenziwa, nto leyo enika umsebenzisi into yesibini, mhlawumbi iSMS, ukuba ayisebenzise kakubi.
La maqela mabini aqhutywa ziimpawu ezahlukeneyo: wuguoqiangvip28 kwaye claude-code-best@proton.meBakwasebenzisa neziseko zophuhliso ezingadibaniyo.
Nangona kunjalo, zihlangana ngenjongo enye: ziba yindlela ye-API yomphuhlisi, emva koko zifunde okanye ziphinde zibhale ithrafikhi ehamba ngayo.
Yintoni Entsha Apha
Sijonge irekhodi loluntu lolwazi ngezoyikiso ukuze sibone kwangaphambili indlela yokuhlasela ngaphambi kokuba sibhale le posi.
Ingxelo ekhoyo egubungela isihloko esibanzi
| imvelaphi | Oko Ikugubungelayo |
|---|---|
| utyekelo Micro | Ukutshintshatshintsha ii-akhawunti zeGoogle Ads ukuya kwiifayile zokufaka ezingezizo, kunye nokukhutshwa kwe-GitHub emva kokuvuza okuhambisa ii-akhawunti zeVidar, iGhostSocks, kunye nePureLog. Ii-IOC zenethiwekhi zisekelwe kwiwebhusayithi. |
| Zscaler ThreatLabz | Ukuvuza kwemephu yomthombo kwi-@anthropic-ai/claude-code 2.1.88 kunye nokubhalwa kwamagama eephakheji zangaphakathi emva kokuvuza okukhawulezileyo okubhekiselwe kumthombo ovuzayo. Akukho kukhankanywa kwee-clones ezisebenzayo. |
| Iindaba zeHacker, iVentureBeat, iInfoQ, iCoder, iindaba zeBitcoin | Iindaba ezisasazwayo ngesiganeko sokuvuza kwe-Anthropic ngokwaso. Akukho nanye edlula isihloko esiphambili sokuvuza. |
| Safety | Ii-typosquats ze-npm zokuxhomekeka kwemithombo evuzayo. Ayilodidi lwe-functional-clone. |
| 7i | Ukungasebenzi kakuhle kwekhompyutha kunye neClickFix kwi-macOS, kunye nolwandiso lwe-VS Code oluyingozi oluzenza “i-plugin yeClaude Code.” Iqinisekisa kwingxelo yayo ye-scope ukuba ayigubungeli izoyikiso zephakheji ye-npm. |
| IiMalwarebytes, iindaba zeCyber, iRejista | Ukuhanjiswa kwePlugX okusekelwe kwiwebhusayithi yobuxoki. Ukusasazwa ngewebhusayithi, kungekhona ngerejista. |
| I-Xygeni Malicious Code Digest 68 | Uluhlu lwe-heibai:2.1.88-claude.hk-4 kwitheyibhile yephakheji enobuqhophololo yeveki ka-Epreli 1 ngaphandle kweenkcukacha zobugcisa, ii-IOC, okanye umxholo. I-Digest 72 kunye nee-digest ezingenelelayo azibuyeli kuyo. |
Oko Kongezwayo yile posi
Okokuqala, le posi ibhala ingxelo ethi I-CA-bundle + i-WebSocket-tunnel TTP ngokwayo.
Ipateni ethi “bhala i-CA cert ekhayeni lomsebenzisi, uze uyidlulisele yonke i-API traffic ngeWebSocket kwi-URL esisiseko enokulungiselelwa”, ngokwendlela esiyifunda ngayo, ayichazwanga nakweyiphi na imibhalo ye-malware kawonke-wonke yeClaude Code. Ithule kwaye ihlala ixesha elide kune ANTHROPIC_BASE_URL phinda ubhale into yokuba abanye abakhuseli sele beyifuna.
Okwesibini, esi sithuba sichonga iqela kwii-scopes ze-npm.
Ikhonkco phakathi claude-code-best, @tmecontinue/claude, kwaye i claude-code-best@proton.me ubuwena abuzange bupapashwe ngaphambili. Abakhuseli abafuna i-proton.me bathumele i-imeyile kumbhali package.json kufuneka sikwazi ukufumana abanye abantakwethu ngendlela efanayo nathi.
Okwesithathu, esi sithuba sibonelela ngengxelo yobugcisa ye heibai.
Ingqokelela kaXygeni ikhankanye le phakheji ngegama ngaphandle kwe-IOCs. claude.hk Ukuhamba kwe-OAuth-phishing, ~/.claude/phone_cache.json i-cache engenanto, i heibai.cd.xdo.icu I-C2, kunye neqhinga lokuqhubeka kwe-shell-profile zibhalwe apha okokuqala ngaphandle kwerekhodi yethu yangaphakathi ye-triage.
Okwesine, esi sithuba sazisa ngesakhelo "somaleko wesine".
Ingxelo ekhoyo iphatha uhlaselo olunesihloko seClaude-Code njengebhakethi enye. Sithi iklasi ye-functional-wrapper yahlukile kwi-malvertising, iiwebhusayithi zobuxoki, ii-leak-typosquats, kunye nezandiso ze-trojanised.
Akufuneki mpumelelo yobunjineli ngexesha lokufaka, akukho fakelo iphukileyo, akukho kuthunyelwa kwakhona kwiziseko zohlaselo, kwaye akukho mahluko ucacileyo obonakalayo kumsebenzisi.
Ludidi olulodwa kolu luhlu apho "iphakheji isebenza ngokuchanekileyo" iyinxalenye yohlaselo.
Iimpawu zokuvumelana nokuchongwa
| Iqela A: claude-code-best@proton.me | |
|---|---|
| intsimi | ixabiso |
| iipakethe ze-npm | claude-code-best, iinguqulelo 1.9.4 ukuya ubuncinane 2.0.1; @tmecontinue/claude:2.2.6 |
| I-imeyile yombhali | claude-code-best@proton.me |
| Indawo yokugcina izinto kwi-manifest | git+https://github.com/claude-code-best/claude-code.git |
| Ukuzichaza | “I-Anthropic Claude Code CLI eguqulwe ngendlela engaqhelekanga — umncedisi wekhowudi ye-AI osebenzisanayo kwisiphelo sendlela” |
| Imodyuli yokufakelwa, 2.0.1 | dist/chunks/upstreamproxy-B_airU5c.js, kuquka i-downloadCaBundle kunye ne-startUpstreamProxyRelay |
| Indlela yesatifikethi se-CA | ~/.ccr/ca-bundle.crt |
| Iindawo zokugqibela zomsebenzisi | ${baseUrl}/v1/code/upstreamproxy/ca-cert, ${baseUrl}/v1/code/upstreamproxy/ws |
| Umthombo we-URL esisiseko | Seta ngokhetho lwe-ccrBaseUrl okanye i-ANTHROPIC_BASE_URL |
| I-Telemetry kwi @tmecontinue/claude:2.2.6 | otheve.beacon.qq.com, oth.str.beacon.qq.com, h.trace.qq.com |
| Izikhombisi ze-ATTA | I-ATTA_ID 00400014144, ATTA_TOKEN 6478159937 |
| Iqela B: wuguoqiangvip28 / heibai | |
|---|---|
| intsimi | ixabiso |
| iphakheji ye-npm | heibai:2.1.88-claude.hk-4 |
| Inqaku loguqulelo | Umtya wenguqulelo ulandela ngokucacileyo i-Anthropic 2.1.88 esemthethweni |
| Umshicileli | wuguoqiangvip28, iakhawunti ye-npm ukususela nge-2025-06-07 |
| Idomeyini yePhishing | claude.hk |
| I-C2 / i-URL yesiseko esithathwe ngenkani | https://heibai.cd.xdo.icu |
| I-cache yeziqinisekiso zasekuhlaleni | ~/.claude/phone_cache.json, umbhalo ocacileyo |
| Ukunyamezela | I-ANTHROPIC_BASE_URL=https://heibai.cd.xdo.icu ibhalwe kwi ~/.claude/settings.json, .bashrc, kunye ne .zshrc |
| isiko login | uClaudeHkLogin.ts, izindululo zenombolo yefowuni kunye negama lokugqitha |
Isikhokelo sokuFumanisa
Imithetho emithathu ibamba ipateni yeFauxCode ngokubanzi ngaphandle kokufuna ii-endpoints ezithile zomqhubi.
Okokuqala, jonga ~/.ccr/ca-bundle.crt ibhalwe yi-npm-installed binary.
Akukho zixhobo zisemthethweni ezipapashwe yi-Anthropic ezibeka iphakheji ye-CA kwi ~/.ccr/Ukuba inkqubo ivele kwi node_modules/.bin ubhala loo ndlela, aphathe iphakheji yokuqala njengento enobutshaba de kuqinisekiswe ukuba akunjalo.
Okwesibini, ukuqapha ANTHROPIC_BASE_URL imiselwe kuyo nayiphi na into engeyiyo https://api.anthropic.com, okanye i-proxy yenkampani evunyiweyo ngumthengi, ngaphakathi:
Le yisignali exabiso liphezulu kuzo zombini ii-clusters. Jonga utshintsho kwiifayile ezenziwe yi-package install scripts.
Okwesithathu, phawula nayiphi na iphakheji ye-npm enokuthi package.json Inkcazo iqala ngo-“Reverse-engineered Anthropic” okanye ibandakanya zombini claude-code kwaye proton.me kwi-imeyile yombhali.
Le yindlela yokucinga ngomshicileli-ubunikazi. Ibambe umntakwabo wesibini kuthi, kwaye kufanele ivumele abakhuseli bafumane ezinye iipakethe zeFauxCode ngaphambi kokuba ziphawulwe.
Kwimibutho esebenzisa ukujonga ukuphuma kweenkqubo kwiimashini zomphuhlisi, naluphi na uqhagamshelo lweWebSocket oluphumayo ukusuka kwinkqubo yeNode.js ukuya kwindlela ephela ngolu hlobo:
sisignali yeFauxCode Cluster A, nokuba ngubani na umsingathi ekujoliswe kuye. Indlela ibhalwe kwi-hard-code kwi-implant module.
