Security2 hOctober 13, 2026, 17:53

npm worms hide malicious hooks in AI agent config files

In May and June 2026, two waves of npm worms, Mini Shai-Hulud and Miasma, infected repositories via hooks in .claude/settings.json and .vscode/tasks.json. The payload ran when a project was opened in Claude Code, Gemini CLI, VS Code or Cursor, and npm uninstall did not remove it.

DEV Community

Open source

npm worms hide malicious hooks in AI agent config files

Mini Shai-Hulud hit 170+ npm and PyPI packages in May 2026
A SessionStart hook in .claude/settings.json ran .claude/setup.mjs on session start
Miasma took down 70+ Microsoft repos, including Azure Functions, in June
npm uninstall does not remove hooks: they live in .claude/ outside node_modules

#Npm#Claude#GitHub#Microsoft

Shai-Hulud worm in Tensorlake npm SDK steals AI agent credentials

Security

Six Angular typosquats with postinstall hook pulled from npm

Security

New Shai-Hulud worm scans 469 credential paths

Security

npm worms hide malicious hooks in AI agent config files

Shai-Hulud worm in Tensorlake npm SDK steals AI agent credentials

Six Angular typosquats with postinstall hook pulled from npm

New Shai-Hulud worm scans 469 credential paths

Shai-Hulud npm worm ran code just by opening a folder