A sophisticated supply-chain worm, dubbed ChainDrop or Mini Shai-Hulud, compromised over 400 npm packages, stealing credentials from developer and CI/CD environments. The worm uniquely leveraged stolen GitHub credentials to directly inject malicious configuration files into the `.claude/` directory of Claude Code and `.vscode/` directory for Visual Studio Code. This allowed the malware to persist and re-execute automatically when developers opened affected repositories in these tools, bypassing standard incident response measures like credential rotation. AI
IMPACT Highlights a novel attack vector targeting AI coding assistants, necessitating new security measures for developer tools.
RANK_REASON The item details a novel persistence mechanism for malware targeting specific developer tools, rather than a new release from a frontier AI lab.
Read on dev.to — Claude Code tag →
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →
