@withgoogle/stitch-sdk

Scope squatting attack impersonating Google's legitimate @google/stitch-sdk for the Google Stitch AI design tool. Registers the @withgoogle npm scope (first-come-first-served, Google publishes under @google not @withgoogle). Dual execution paths: preinstall hook and CLI binary both harvest developer credentials from 8 sources (Claude Code auth, git config, .gitconfig, .git-credentials, SSH public keys, GitHub CLI, npm config/.npmrc, Docker config). Exfiltrates via HTTPS GET to stitch-production.org with TLS validation disabled. No code obfuscation. Claude Code targeted as first priority. v0.1.2 adds fallback beacon for zero-credential installs.