# Claude Code · Drain Watch

2 incidents, 0 live. JSON: https://drains.watch/t/claude-code.json · RSS: https://drains.watch/t/claude-code/feed.xml

- [TrapDoor packages on npm, PyPI and Crates.io steal wallet data and plant hidden prompts for AI coding tools](https://drains.watch/i/trapdoor-supply-chain-ai-assistant-config-poisoning-may-2026) (closed, High, Partly contained, since May 26, 2026)
- [Compromised Nx npm packages ran victims' AI command-line tools to hunt for wallet and keystore files](https://drains.watch/i/nx-s1ngularity-npm-malware-ai-cli-wallet-search-aug-2025) (closed, Critical, Contained, since Aug 26, 2025)