{"error":"Q_MISMATCH","message":"Provided tweak does not produce expected Q from PSBT","request_id":"e7df8839","details":{"Q_expected":"019713c01b5603df8b3e5264555f3e98d492cebcd67ed3e57e9228b3f4c5156d","Q_computed":"2ed9af8d0bfb7136f505e55024e9f0250bfdd29f2841ad62eeb6ef01e711962f","P_xonly":"275e8cbe724d797701ab53147aec88d715e799fa0d0f3ec6f643dc83d32792ec","tweak32":"054e7423c9ff76158ff87ad3d559a3b1f9d205cc1e498f660fa0bbbe38d39f44","fix":"Ensure iOS uses 32-byte x-only keys in tapscript leaf, not 33-byte compressed"}}
A popular NPM package got compromised, attackers updated it to run a post-install script that steals secrets
But the script is a *prompt* run by the user's installation of Claude Code. This avoids it being detected by tools that analyze code for malware
From @zacl_overflow on X
I really think that it is fantastic that biodiversity leads to less viruses and diseases that can spread because all the hosts are different. Diversity is really something we should celebrate and support not only biological, but also in terms of software