{"id":2143,"date":"2026-04-02T07:39:06","date_gmt":"2026-04-02T07:39:06","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/anthropic-npm-code-leak-ai-supply-chain-risks"},"modified":"2026-04-02T07:39:06","modified_gmt":"2026-04-02T07:39:06","slug":"anthropic-npm-code-leak-ai-supply-chain-risks","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks","title":{"rendered":"Anthropic NPM Code Leak: AI Supply Chain Vulnerabilities"},"content":{"rendered":"\n

\u26a1 Quick Take<\/h2>\n\n\n\n
\n

Anthropic’s accidental leak of proprietary source code is more than a simple PR fumble; it’s a stark warning about the fragile software supply chains underpinning the entire AI industry. An apparent misconfiguration in an npm<\/strong> package publish exposed the soft underbelly of AI development, revealing that even top-tier labs are vulnerable to classic, preventable software engineering failures. This incident shifts the security conversation from abstract model safety to the gritty, urgent reality of CI\/CD<\/strong> pipelines and code governance.<\/p>\n<\/blockquote>\n\n\n\n

Ever wondered how a tiny oversight could ripple through the heart of AI innovation? That’s exactly what we’re seeing here.<\/p>\n\n\n\n

What happened<\/h3>\n\n\n\n

Proprietary source code from Anthropic, maker of the Claude LLM<\/strong> family, was inadvertently published to the public npm<\/strong> package registry. This sort of leak usually comes down to a misconfigured publish command or some glitch in a continuous integration\/deployment (CI\/CD<\/strong>) workflow – and just like that, private code goes live for the world to see, in mere seconds. From what I’ve seen in similar cases, it’s the kind of slip that catches even seasoned teams off guard.<\/p>\n\n\n\n

Why it matters now<\/h3>\n\n\n\n

Sure, the industry’s all eyes on advanced AI safety and red-teaming those models, but this slip-up drives home a tougher truth: the biggest threats often lurk in the basics, the infrastructure we take for granted. For AI outfits, where code is the crown jewel – think training setups, evaluation tools, those custom safety filters – a breach like this hits right at the core of what keeps them ahead. It erodes that edge, fast.<\/p>\n\n\n\n

Who is most affected<\/h3>\n\n\n\n

Look, security and DevOps folks at the big AI labs – OpenAI, Google, Meta, you name it – they’re feeling the heat to double-check their own supply chains right now. Enterprise buyers? They’re going to push harder for proof that the AI tools they’re weaving into their ops are solid, traceable, secure. And developers everywhere get a nudge: those go-to tools come with defaults that can bite if you’re not watching closely.<\/p>\n\n\n\n

The under-reported angle<\/h3>\n\n\n\n

But here’s the thing – this isn’t pinned just on Anthropic; it’s a wake-up to a deeper clash, where speedy, research-driven coding meets the hard edges of real-world production. Plenty of reasons for that, really: the tools for building cutting-edge AI often mirror what’s used for casual side projects, leaving huge gaps unpatched. It’s a reminder that the AI boom’s foundation needs shoring up, before the cracks widen.<\/p>\n\n\n\n

\ud83e\udde0 Deep Dive<\/h2>\n\n\n\n

Have you paused to think about the quiet risks humming beneath all that AI hype? The Anthropic code leak pulls back the curtain on just those operational pitfalls modern AI teams face every day.<\/p>\n\n\n\n

While the nitty-gritty of the leaked package stays hushed, the how of it – that accidental public npm<\/strong> publish – is a familiar headache in the JavaScript world, now cranked up by AI’s sky-high stakes. No fancy hack from outside, mind you; more like an inside fumble, maybe a lone misstep in code or pipeline that spotlights how AI’s exploratory vibe sometimes skips over production-level safeguards. I’ve noticed this gap time and again in fast-moving tech spaces – it’s human, but costly.<\/p>\n\n\n\n

The fallout from a leak like this packs a punch that’s especially brutal for AI firms. Your average software slip might spill some routine logic, but here? It could lay bare the real treasures: not just code for running models, but those clever prompt setups, homegrown evaluation kits, fine-tuning playbooks, or the very tricks keeping things safe from bad actors. Hand that over, and rivals peek at your playbook – or worse, foes find ways around the walls. All of which screams: every step in AI’s lifecycle, from wrangling data to rolling out models, deserves top-tier protection.<\/p>\n\n\n\n

And this? It’s part of a bigger puzzle in how these orgs run things – that fuzzy divide between wild-card research scripts and bulletproof production gear. In the rush to break ground, teams lean on open hubs like npm<\/strong> or PyPI<\/strong> for quick builds, which is smart until it’s not. Skip the tough stuff – like ironclad CI\/CD checks, scanning for secrets, or signing off on artifacts with SLSA<\/strong> or in-toto<\/strong> – and speed turns risky. Those easy defaults in the tools? They steer folks toward trouble without a second thought, turning “oops” into a daily hazard.<\/p>\n\n\n\n

For the rest of the AI crowd, this is your cue – no ifs about it. The fix-it guide is straightforward, and it can’t wait: lock down registries with 2-Factor Authentication (2FA)<\/strong> everywhere, scope your packages right (@org\/package-name<\/code>) to dodge takeovers, and layer in those pipeline shields. Think mandatory test publishes, auto-scans on commits, gates that demand a green light before anything goes public. Down the line, showing off a supply chain that’s locked tight and trackable? It’ll matter as much as how your models score on the charts.<\/p>\n\n\n\n

\ud83d\udcca Stakeholders & Impact<\/h2>\n\n\n\n
Stakeholder \/ Aspect<\/th>Impact<\/th>Insight<\/th><\/tr><\/thead>
AI \/ LLM Providers<\/td>High<\/td>Immediate reputational risk and IP exposure. Forces a costly but necessary internal security audit of all software supply chain practices. Competitors gain an opportunity to learn from the mistake.<\/td><\/tr>
DevOps & Security Teams<\/td>High<\/td>Mandate to urgently review and harden CI\/CD pipelines, npm\/PyPI publishing rights, and secret management. This shifts focus from theoretical application security to foundational infrastructure integrity.<\/td><\/tr>
Enterprise Customers<\/td>Medium<\/td>Increased scrutiny of vendors’ security practices. Demand for Software Bills of Materials (SBOMs<\/strong>) and supply chain attestations will likely surge as a condition for enterprise contracts.<\/td><\/tr>
Open Source Registries (npm)<\/td>Low<\/td>Reinforces the ongoing challenge of user error on a public platform. It may accelerate adoption of organization-level security features and clearer warnings about public publishing defaults.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u270d\ufe0f About the analysis<\/h2>\n\n\n\n

This is an independent analysis by i10x, based on forensic examination of common software supply chain failure modes and their specific implications for the AI industry. It is designed for engineering leaders, CTOs, and security professionals building or deploying AI systems who need to translate this incident into an actionable risk mitigation strategy – the kind of practical steps that turn a close call into stronger ground ahead.<\/p>\n\n\n\n

\ud83d\udd2d i10x Perspective<\/h2>\n\n\n\n

What if the real test of AI’s future isn’t the flashiest breakthrough, but how steadily we guard the gears behind it? That’s the signal this Anthropic code leak is flashing – a early alert for the whole AI infrastructure setup.<\/p>\n\n\n\n

It’s showing us that the sprint toward something like artificial general intelligence runs on shaky, old-school lines that tech has wrestled with forever – and we’re not immune. For so long, the edge in AI felt like hoarding data, top talent, slick architectures. But this? It flips that: the true stronghold, the one we sleep on, might be those everyday ops that keep things secure. The winner here won’t just craft the sharpest model; it’ll forge a factory that’s tough, reliable, worth betting on. And yeah, that means the fight for AI’s top spot is now tangled up in the nuts and bolts of CI\/CD.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

Explore the implications of Anthropic’s accidental NPM code leak, highlighting risks in AI software supply chains, CI\/CD pipelines, and actionable steps for securing AI development. Learn how to protect your infrastructure.<\/p>\n","protected":false},"author":2,"featured_media":2142,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":""},"categories":[3,12,28],"tags":[],"companies":[39],"products":[],"class_list":["post-2143","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-anthropic","category-policy-safety","category-security-defense","company-anthropic"],"yoast_head":"\nAnthropic NPM Code Leak: AI Supply Chain Vulnerabilities - i10X News<\/title>\n<meta name=\"description\" content=\"Anthropic's NPM code leak reveals AI supply chain vulnerabilities. Learn about risks and how to secure AI development and CI\/CD pipelines.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Anthropic NPM Code Leak: AI Supply Chain Vulnerabilities - i10X News\" \/>\n<meta property=\"og:description\" content=\"Anthropic's NPM code leak reveals AI supply chain vulnerabilities. Learn about risks and how to secure AI development and CI\/CD pipelines.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-04-02T07:39:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/anthropic-code-leak-analysis.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/anthropic-npm-code-leak-ai-supply-chain-risks#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/anthropic-npm-code-leak-ai-supply-chain-risks\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"Anthropic NPM Code Leak: AI Supply Chain Vulnerabilities\",\"datePublished\":\"2026-04-02T07:39:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/anthropic-npm-code-leak-ai-supply-chain-risks\"},\"wordCount\":1206,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/anthropic-npm-code-leak-ai-supply-chain-risks#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/anthropic-code-leak-analysis.webp\",\"articleSection\":[\"Anthropic\",\"Policy & Safety\",\"Security & Defense\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/i10x.ai\\\/news\\\/anthropic-npm-code-leak-ai-supply-chain-risks#respond\"]}],\"dateModified\":\"2026-04-02T07:39:06+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/anthropic-npm-code-leak-ai-supply-chain-risks\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/anthropic-npm-code-leak-ai-supply-chain-risks\",\"name\":\"Anthropic NPM Code Leak: AI Supply Chain Vulnerabilities - i10X News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/anthropic-npm-code-leak-ai-supply-chain-risks#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/anthropic-npm-code-leak-ai-supply-chain-risks#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/anthropic-code-leak-analysis.webp\",\"datePublished\":\"2026-04-02T07:39:06+00:00\",\"description\":\"Anthropic's NPM code leak reveals AI supply chain vulnerabilities. Learn about risks and how to secure AI development and CI\\\/CD pipelines.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/anthropic-npm-code-leak-ai-supply-chain-risks#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10x.ai\\\/news\\\/anthropic-npm-code-leak-ai-supply-chain-risks\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/anthropic-npm-code-leak-ai-supply-chain-risks#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/anthropic-code-leak-analysis.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/anthropic-code-leak-analysis.webp\",\"width\":1344,\"height\":768,\"caption\":\"Cracked digital sphere with circuit board patterns and orbiting rings, symbolizing AI supply chain vulnerability and data breach.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/anthropic-npm-code-leak-ai-supply-chain-risks#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/news.i10x.ai\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Anthropic NPM Code Leak: AI Supply Chain Vulnerabilities\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#website\",\"url\":\"https:\\\/\\\/news.i10x.ai\\\/\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/news.i10x.ai\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/news.i10x.ai\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Anthropic NPM Code Leak: AI Supply Chain Vulnerabilities - i10X News","description":"Anthropic's NPM code leak reveals AI supply chain vulnerabilities. Learn about risks and how to secure AI development and CI\/CD pipelines.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks","og_locale":"en_US","og_type":"article","og_title":"Anthropic NPM Code Leak: AI Supply Chain Vulnerabilities - i10X News","og_description":"Anthropic's NPM code leak reveals AI supply chain vulnerabilities. Learn about risks and how to secure AI development and CI\/CD pipelines.","og_url":"https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks","og_site_name":"i10X News","article_published_time":"2026-04-02T07:39:06+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/anthropic-code-leak-analysis.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks#article","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks"},"author":{"name":"Christopher Ort","@id":"https:\/\/news.i10x.ai\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"Anthropic NPM Code Leak: AI Supply Chain Vulnerabilities","datePublished":"2026-04-02T07:39:06+00:00","mainEntityOfPage":{"@id":"https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks"},"wordCount":1206,"commentCount":0,"publisher":{"@id":"https:\/\/news.i10x.ai\/#organization"},"image":{"@id":"https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/anthropic-code-leak-analysis.webp","articleSection":["Anthropic","Policy & Safety","Security & Defense"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks#respond"]}],"dateModified":"2026-04-02T07:39:06+00:00"},{"@type":"WebPage","@id":"https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks","url":"https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks","name":"Anthropic NPM Code Leak: AI Supply Chain Vulnerabilities - i10X News","isPartOf":{"@id":"https:\/\/news.i10x.ai\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks#primaryimage"},"image":{"@id":"https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/anthropic-code-leak-analysis.webp","datePublished":"2026-04-02T07:39:06+00:00","description":"Anthropic's NPM code leak reveals AI supply chain vulnerabilities. Learn about risks and how to secure AI development and CI\/CD pipelines.","breadcrumb":{"@id":"https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/anthropic-code-leak-analysis.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/anthropic-code-leak-analysis.webp","width":1344,"height":768,"caption":"Cracked digital sphere with circuit board patterns and orbiting rings, symbolizing AI supply chain vulnerability and data breach."},{"@type":"BreadcrumbList","@id":"https:\/\/i10x.ai\/news\/anthropic-npm-code-leak-ai-supply-chain-risks#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/news.i10x.ai\/"},{"@type":"ListItem","position":2,"name":"Anthropic NPM Code Leak: AI Supply Chain Vulnerabilities"}]},{"@type":"WebSite","@id":"https:\/\/news.i10x.ai\/#website","url":"https:\/\/news.i10x.ai\/","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/news.i10x.ai\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/news.i10x.ai\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/news.i10x.ai\/#organization","name":"i10X","url":"https:\/\/news.i10x.ai\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/news.i10x.ai\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/news.i10x.ai\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/news.i10x.ai\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"}}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/2143","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=2143"}],"version-history":[{"count":1,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/2143\/revisions"}],"predecessor-version":[{"id":5116,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/2143\/revisions\/5116"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/2142"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=2143"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=2143"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=2143"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=2143"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=2143"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}