Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

A malicious npm package worm originating from [email protected] has spread to hundreds of packages across multiple organizations, leveraging preinstall scripts to steal developer and CI credentials, including repository, cloud, and private-key material. The payload can propagate by republishing compromised packages using stolen npm credentials and includes secondary execution paths via .claude and .vscode hooks that activate when a user trusts the workspace. The attack leveraged legitimate GitHub Actions workflows, resulting in valid SLSA and OIDC provenance, making detection more difficult. The malware family is linked to prior PyPI compromises and is associated with the Shai-Hulud campaign, though the specific threat actor remains unidentified.

AI-extracted · verify before operational use