--- title: Attackers Are Learning to Live Off the AI Toolchain description: Sandworm_Mode, a self-propagating worm spreading via 19 malicious npm packages, represents an emerging class of attacks that exploit trusted AI coding... canonical: https://daily.dev/posts/attackers-are-learning-to-live-off-the-ai-toolchain-fu530fdll twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Attackers Are Learning to Live Off the AI Toolchain | daily.dev og:description: Sandworm_Mode, a self-propagating worm spreading via 19 malicious npm packages, represents an emerging class of attacks that exploit trusted AI coding... og:url: https://daily.dev/posts/attackers-are-learning-to-live-off-the-ai-toolchain-fu530fdll og:image: https://api.daily.dev/og/posts/FU530fDlL.png og:image:alt: Attackers Are Learning to Live Off the AI Toolchain og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Attackers Are Learning to Live Off the AI Toolchain **[Dark Reading](https://daily.dev/sources/dr)** · 5 min read · 0 upvotes · 0 comments ## Summary Sandworm_Mode, a self-propagating worm spreading via 19 malicious npm packages, represents an emerging class of attacks that exploit trusted AI coding assistants and CI/CD pipelines. CrowdStrike's analysis found that of 14 malicious behaviors, only 2 produced reliable detection signals — the rest were indistinguishable from normal developer automation. The worm steals credentials from npm, GitHub, cloud, and LLM providers, exfiltrates them via DNS tunneling, and compromises AI tools like Cursor and Claude Code through a rogue MCP server using prompt injection. A 48–96 hour delay between installation and payload activation further defeats correlation-based detection. CrowdStrike frames this as the AI-era equivalent of living-off-the-land attacks, urging organizations to establish behavioral baselines for AI toolchain activity and extend security into the AI development lifecycle. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [New npm worm hits CI pipelines and AI coding tools](https://daily.dev/posts/new-npm-worm-hits-ci-pipelines-and-ai-coding-tools-3fx3mdyns) · InfoWorld · 0 upvotes · 0 comments - [Another npm supply chain worm hits dev environments](https://daily.dev/posts/another-npm-supply-chain-worm-hits-dev-environments-birdicj09) · The Register · 0 upvotes · 0 comments - [New IronWorm malware hits 36 packages in npm supply-chain attack](https://daily.dev/posts/new-ironworm-malware-hits-36-packages-in-npm-supply-chain-attack-2rfjqmxiq) · BleepingComputer · 62 upvotes · 21 comments --- Tags: [#security](https://daily.dev/tags/security), [#cicd](https://daily.dev/tags/cicd), [#malware](https://daily.dev/tags/malware), [#ai-coding](https://daily.dev/tags/ai-coding), [#npm](https://daily.dev/tags/npm) [View this post on daily.dev](https://daily.dev/posts/attackers-are-learning-to-live-off-the-ai-toolchain-fu530fdll) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Attackers Are Learning to Live Off the AI Toolchain","url":"https://daily.dev/posts/attackers-are-learning-to-live-off-the-ai-toolchain-fu530fdll","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/attackers-are-learning-to-live-off-the-ai-toolchain-fu530fdll"},"datePublished":"2026-07-22T21:41:45.799Z","dateModified":"2026-07-22T21:46:47.692Z","description":"Sandworm_Mode, a self-propagating worm spreading via 19 malicious npm packages, represents an emerging class of attacks that exploit trusted AI coding...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a2df0f6bbb86aa7693356a4b23611467?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a2df0f6bbb86aa7693356a4b23611467?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Dark Reading","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Dark Reading","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/dr","url":"https://daily.dev/sources/dr"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/attackers-are-learning-to-live-off-the-ai-toolchain-fu530fdll","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cicd,malware,ai-coding,npm","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Dark Reading","item":"https://daily.dev/sources/dr"},{"@type":"ListItem","position":3,"name":"Attackers Are Learning to Live Off the AI Toolchain"}]} ```