The npm install command uses @anthropic-ai/claude-code@latest which installs an unpinned, floating version. If this package is compromised or a malicious version is published, it will be automatically installed in the CI/CD pipeline. This is especially risky because the Claude Code CLI likely executes with significant permissions and can access repository secrets.

Also found at:

• .github/workflows/docs-codebase-update.lock.yml:297