Aikido Intel
Secure My Code
Package Health

@anthropic-ai/sdk

The official TypeScript library for the Anthropic API

Latest 0.135.0NPMNPM

97%

Total Score

healthy

Frequent releases, active contributors, and clean publishing workflows support this release.

Are you affected? Scan for Free

Health Score Breakdown

All health scores are okay.

Vulnerabilities

TitleVersionsSeverity
CVE-2026-41686
@anthropic-ai/sdk is vulnerable to Incorrect Permission Assignment for Critical Resource in versions 0.79.0 - 0.91.1.
0.79.0 - 0.91.1
Medium
CVE-2026-34451
@anthropic-ai/sdk is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.79.0 - 0.81.0.
0.79.0 - 0.81.0
Medium

Package versions

Maintainers

zak-anthropic
dylanc-anthropic
benjmann
nikhil-anthropic
ejlangev-ant
jv-anthropic
ollie-ant-2025
packy-anthropic
claude-code-npm
noahz-anthropic
sbidasaria
wolffiex
meorphis-anthropic
felixrieseberg-anthropic
joan-anthropic

Direct Dependencies

DependencyLast ReleaseScore
standardwebhooks
Version ^1.0.0
—
—
json-schema-to-ts
Version ^3.1.1
—
—
@opentelemetry/api
Version ^1.4.1
—
—

Weekly Downloads

Info

Last Published
19 hours ago
Created
3 years ago
Unpacked Size
13.9 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Scan for Free
Book a Demo

Free. No credit card required.

Aikido Platform
Subscribe
Stay up to date with all updates

I consent to receiving marketing communications based on Aikido’s Privacy Policy.

LinkedIn YouTube X
© 2026 Aikido Security BV | BE0792914919
Ghent, Belgium | San Francisco, US
SOC 2SOC 2Compliant
ISO 27001ISO 27001Compliant
ISO 42001ISO 42001Compliant
FedRAMPFedRAMPImplementing

© All Intel data is openly available and commercially licensed.