{
  "id": 2794144,
  "title": "A Supply-Chain Worm Wrote Itself Into Claude Code's Hook Files to Survive Credential Rotation",
  "url": "https://urgent.news/2026/08/23/a-supply-chain-worm-wrote-itself-into-claude-codes-hook-files-to",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-23T13:21:00.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/ramdai_bista/a-supply-chain-worm-wrote-itself-into-claude-codes-hook-files-to-survive-credential-rotation-5ce4"
  },
  "original_language": "en",
  "account": "The npm supply-chain attack known as \"ChainDrop\" occurred in August 2026, targeting an npm maintainer account. The malicious actor published trojanized releases across more than 400 packages from unrelated publishers, compromising credentials from developer and CI/CD environments, including Microsoft.\n\nWhat made this incident unique was the malware's use of stolen GitHub credentials to directly commit files into developer repositories. These files, including .claude/settings.json and .vscode/tasks.json, executed automatically upon repository opening in Claude Code and VS Code. The worm's persistence mechanism meant that even after credentials were rotated and clean package versions were pinned, the malware could still execute, defeating developers' incident response efforts.\n\nThe worm took advantage of Claude Code's legitimate feature of automatically executing hooks declared in .claude/settings.json upon session start. The malware's positioning within the repo allowed it to defeat Claude Code's trust in the .claude/ directory's contents, demonstrating how a worm with write access can manipulate tools that auto-execute config from repositories.",
  "summary": "Rotating your credentials and removing a poisoned package is supposed to end an npm supply-chain compromise. In early August 2026, one worm made sure it didn't have to. What happened Microsoft's security research team tracked a campaign it calls \"ChainDrop\" — reported elsewhere as the keyv/cacheable compromise, or \"Mini Shai-Hulud\" — that took over an npm maintainer account and published…",
  "key_points": [
    "ChainDrop attack targeted npm maintainer account in August 2026",
    "Malware used stolen GitHub credentials to commit files into repositories",
    ".claude/settings.json hook files allowed malware persistence"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}