npm supply-chain worm steals credentials, targets Claude Code environments
SaiyanOfDarkness · reddit · 2026-08-05
Security firm Socket is tracking an active npm supply-chain worm. Initially infecting the popular keyv and cacheable packages, it has spread to hundreds of others via self-propagation. The malware uses a malicious preinstall hook to deploy an obfuscated payload that specifically harvests developer credentials like npm, GitHub, and AWS tokens.
Worm-like Propagation & AI Targeting
- Auto-propagation: After stealing an npm token, the malware automatically finds other packages the victim can publish, injects the malicious code, and republishes them.
- Targeting AI Coding Tools: Attackers planted execution hooks specifically for Claude Code (.claude/settings.json) and VS Code (.vscode/tasks.json). This means developers can trigger the malware simply by cloning and trusting the repository in an AI coding agent, without even running npm install.
- Signature Bypass: Even packages with valid Sigstore provenance were compromised because the source code was tainted before the legitimate release build.
The malware also installs a persistence mechanism on macOS and Linux, requiring thorough environment cleanup before rotating credentials.
Related event: npm Ecosystem Hit by Supply Chain Worm Infecting 868+ Packages(5 posts)→
More from coding & agent
- Cloud Agents vs. Local Machines: Trust and Verification Workflows — hugobowne · 2026-08-27
- Deepagents Evolving into Multiplayer Harness — hwchase17 · 2026-08-27
- Google proposes upgrading OKF to enterprise infrastructure with Knowledge Catalog — gaganghotra_ · 2026-08-27
- WebMCP May Become Standard for Future Sites, Accelerating Agent Interaction — thisiskp_ · 2026-08-27
- Cloudflare open-sources security-audit-skill: parallel agents run six-phase vulnerability audits — tom_doerr · 2026-08-27
- ARC-AGI-3 learnings: Key designs for self-learning AI agents — GregKamradt · 2026-08-27