OpenSSF/OSV advisory MAL-2026-15624 confirms this npm version as malicious. claude-channel-telegram@9.9.9 is a dependency-confusion lure with no functional code. package.json wires both preinstall and postinstall lifecycle hooks to run index.js, which reads os.hostname() and issues an HTTPS request to https://eo8f3m3ho26a0nm.m.pipedream.net/claude-channel-telegram?h=<hostname>, sending the installing machine's hostname to an attacker-controlled Pipedream webhook on every npm install...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in claude-channel-telegram (npm)
Details
claude-channel-telegram@9.9.9 is a dependency-confusion lure with no functional code. package.json wires both preinstall and postinstall lifecycle hooks to run index.js, which reads os.hostname() and issues an HTTPS request to https://eo8f3m3ho26a0nm.m.pipedream.net/claude-channel-telegram?h=<hostname>, sending the installing machine's hostname to an attacker-controlled Pipedream webhook on every npm install. The package name evokes an Anthropic Claude / Telegram integration and the version is pinned implausibly high (9.9.9) to win resolution against an internal package of the same name. package.json also declares the package as its own dependency and lists `requests` (a typosquat of `request`), consistent with a namespace-squat payload rather than a real library.
Decision reason
OpenSSF Malicious Packages via OSV confirms claude-channel-telegram@9.9.9 as malicious (MAL-2026-15624): Malicious code in claude-channel-telegram (npm)