MALICIOUS (1) campaign cataloged at 2026-06-14(2).

1. The campaign has clearly malicious intent, like infostealers.
2. This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.

2026-06-anthropickit

During installation, the package attempts to exfiltrate sensitive env variables and SSH keys.

Abuse categories

exfiltration_env_variables

Campaign uses exfiltration_env_variables.

exfiltration_ssh_keys

Campaign uses exfiltration_ssh_keys.

Packages in the campaign

campaign:2026-06-anthropickit

• anthropickit