I built a Claude Code plugin that blocks compromised packages before installation

Last week, axios@1.14.1 was hijacked on npm. A few days before that, litellm@1.82.8 on PyPI. Both...