issue

An npm worm is loose, and Opus 4.1 goes dark tomorrow

An active npm supply-chain worm is hunting dev credentials (and Claude configs) — plus a one-way code-review finding, two model deadlines, and Cursor agents in your inbox.