# The npm worm that installs itself into your coding agent

DevFeed: [The npm worm that installs itself into your coding agent](<https://devfeed.tech/articles/the-npm-worm-that-installs-itself-into-your-coding-agent-16036.md>)

Original publisher: [Read original article](<https://workos.com/blog/npm-worm-coding-agent-config-credentials>)

Author: WorkOS

Published: 2026-08-06T15:20:55Z

Content type: article

Language: en

Sources: [WorkOS Blog](<https://devfeed.tech/sources/workos-blog.md>)

Topics: [npm](<https://devfeed.tech/topics/npm.md>), [Claude Code](<https://devfeed.tech/topics/claude-code.md>), [Visual Studio Code](<https://devfeed.tech/topics/visual-studio-code.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>)

Tags: [agent](<https://devfeed.tech/tags/agent.md>), [claude-code](<https://devfeed.tech/tags/claude-code.md>), [code](<https://devfeed.tech/tags/code.md>), [github](<https://devfeed.tech/tags/github.md>), [hooks](<https://devfeed.tech/tags/hooks.md>), [npm-worm](<https://devfeed.tech/tags/npm-worm.md>), [repo](<https://devfeed.tech/tags/repo.md>), [shai-hulud](<https://devfeed.tech/tags/shai-hulud.md>), [vscode](<https://devfeed.tech/tags/vscode.md>), [worm](<https://devfeed.tech/tags/worm.md>)

## AI overview

The article analyzes a Shai-Hulud npm worm that plants executable hooks in .claude/settings.json and .vscode/tasks.json. Opening a compromised repository can trigger the payload in VS Code or Claude Code, creating an attack path that install-time defenses may not detect.

## Source excerpt

A Shai-Hulud wave plants hooks in .claude/settings.json and .vscode/tasks.json, so opening a repo runs the payload. Agent config is executable surface now.