CVE-2026-31431 CVSS 7.8 flaw since 2017 enables root via 732-byte exploit, impacting major Linux distributions.
Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.