This is a malicious package.

This package contains harmful code and was likely published with malicious intent. The presence of this package in a development environment should be treated as a potential compromise.

@cometix/claude-code

Claude Code restored for Node.js runtime.

Licenses: Unknown

Published: 4 months ago Last updated: 6 days ago Latest version: 2.1.224 Latest non-vulnerable version: 2.1.224

License

Unknown>=0;

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the @cometix/claude-code package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
C Malicious Package	=2.1.147=2.1.143

Package versions

93 VERSIONS IN TOTAL See all versions

version	published	direct vulnerabilities
2.1.224	20 Aug, 2026	0 C 0 H 0 M 0 L
2.1.223	19 Aug, 2026	0 C 0 H 0 M 0 L
2.1.222	18 Aug, 2026	0 C 0 H 0 M 0 L
2.1.221	18 Aug, 2026	0 C 0 H 0 M 0 L
2.1.220	7 Aug, 2026	0 C 0 H 0 M 0 L
2.1.219	25 Jul, 2026	0 C 0 H 0 M 0 L
2.1.218	25 Jul, 2026	0 C 0 H 0 M 0 L
2.1.217	25 Jul, 2026	0 C 0 H 0 M 0 L
2.1.216	25 Jul, 2026	0 C 0 H 0 M 0 L
2.1.215	25 Jul, 2026	0 C 0 H 0 M 0 L