Hackers are using fake Claude Code and OpenClaw downloads to spread data-stealing malware like Amatera and AMOS among developers.
Magecart hides payload in favicon EXIF via third-party scripts, bypassing static analysis and stealing checkout data at runtime.