package claude-all-config
Block
Reported malicious in threat research: every version of this package should be treated as harmful. Do not install.
- Latest version
- 3.9.0
- First published
- 9 months ago
- Maintainers
- 1
- Runs code at install
- postinstall
- Catalog grade
- C — Moderate risk signals
- Est. context load
- ~900 tokens / turn (~5 tool schemas, 0.45% of 200k context)
Threat reports
- MaliciousMalicious code in claude-all-config (npm) Affected versions: 3.8.3, 3.9.0, 3.8.4
- MaliciousMalicious code in claude-all-config (npm) Affected versions: 3.8.3, 3.9.0, 3.8.4
If it is already installed, remove it:
# DO NOT INSTALL claude-all-config — remove immediately if present:
npm uninstall claude-all-configBased on public adoption and transparency signals as of Oct 19, 2026. Our opinion, not a code audit or security guarantee. Answers change through the day.