A newly discovered npm package masquerades as a deployment tool while covertly extracting files from Claude AI's dedicated user data…