[gck1]

> It's unclear on how this "punishes normal developers" in any shape or form

Tons of normal developers use ANTHROPIC_BASE_URL, the flag which activates the malware.