The npm worm that installs itself into your coding agent

A reported August 4, 2026 compromise of the GitHub account associated with keyv spread a credential-stealing worm through hundreds of npm packages and thousands of poisoned versions, using both conventional npm preinstall scripts and less familiar repository-level execution paths in VS Code and Claude Code configuration files. The malware added cross-referencing .vscode/tasks.json and .claude/settings.json hooks that could run when a developer opened a cloned repository or began an agent session, potentially affecting users who never installed the package. Its payload sought a broad range of credentials, including npm and GitHub tokens, cloud and Kubernetes secrets, Vault data, CI runner secrets, source-control credentials, application keys, and AI-tool tokens, while stolen publishing credentials could enable further package compromise. Existing protections such as disabled npm lifecycle scripts, provenance attestations, signed commits, and SHA-pinned GitHub Actions did not necessarily prevent the attack because malicious source could pass through legitimate release workflows and API-generated commits could appear verified under spoofed author identities. Researchers also described a possible token-revocation watcher with uncertain deployment status, prompting advice to search systems and branches for persistence artifacts and malicious configuration before rotating credentials. Recommended mitigations include rebuilding affected hosts and CI runners, reviewing executable repository configuration as carefully as application code, restricting automatic editor and agent hooks, using short-lived workload-specific credentials and trusted publishing where feasible, separating identities for agents and automation, and scanning all branches for malicious hooks and workflows that expose serialized secrets.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.