Ask HN: Is ChatGPT/Claude suggesting to use malicious NPM packages?

[kjok]

I wonder if AI coding tools ChatGPT/Claude/Cursor/others are suggesting to use any of the compromised NPM package in an ongoing Shai Hulud attack?