AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

@anthropic-ai/sdk

The official TypeScript library for the Anthropic API

Declares an LLM dependency since 2023-01-31 (version 0.2.0).

npmLatest 0.133.0First release 2023-01-31Registry page RepositoryChecked 2026-10-09

Advisories

Advisories that name @anthropic-ai/sdk as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.

Advisory	Severity	Affected	Fixed in	Published
CVE-2026-41686GHSA-p7fg-763f-g4gf: Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool	Medium	>= 0.79.0, < 0.91.1	0.91.1	2026-04-29

Dependencies of the latest release

As declared in npm metadata for version 0.133.0. Optional extras are listed with their extra name.

Tracked packages that depend on it

Among the packages in the registry; not every dependent on npm.