--- title: SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI... description: Socket's Threat Research Team has uncovered SANDWORM_MODE, an active npm supply chain worm campaign spanning at least 19 malicious packages published under two... canonical: https://daily.dev/posts/sandworm-mode-shai-hulud-style-npm-worm-hijacks-ci-workflow--833azp617 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflow... | daily.dev og:description: Socket's Threat Research Team has uncovered SANDWORM_MODE, an active npm supply chain worm campaign spanning at least 19 malicious packages published under two... og:url: https://daily.dev/posts/sandworm-mode-shai-hulud-style-npm-worm-hijacks-ci-workflow--833azp617 og:image: https://api.daily.dev/og/posts/833aZp617.png og:image:alt: SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflow... og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflow... **[Socket](https://daily.dev/sources/socketdev)** · 30 min read · 0 upvotes · 0 comments ## Summary Socket's Threat Research Team has uncovered SANDWORM_MODE, an active npm supply chain worm campaign spanning at least 19 malicious packages published under two aliases. The worm uses typosquatting to impersonate popular Node.js utilities and AI coding tools (including Claude Code and OpenClaw), then executes a multi-stage payload that harvests developer and CI credentials, exfiltrates data via HTTPS, GitHub API, and DNS tunneling, and propagates by abusing stolen npm/GitHub tokens. A novel capability injects rogue MCP servers into AI coding assistant configs (Claude Code, Cursor, VS Code Continue, Windsurf) with embedded prompt injections that silently steal SSH keys, AWS credentials, and API keys for nine LLM providers. The worm also plants malicious GitHub Actions workflows, persists via global git hook templates, and includes a dormant polymorphic engine designed to use a local Ollama instance for self-rewriting. A destructive dead switch (currently disabled) can wipe the user's home directory if exfiltration and propagation channels are lost. npm has removed the packages and GitHub has taken down the associated infrastructure. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [New npm worm hits CI pipelines and AI coding tools](https://daily.dev/posts/new-npm-worm-hits-ci-pipelines-and-ai-coding-tools-3fx3mdyns) · InfoWorld · 0 upvotes · 0 comments - [Another npm supply chain worm hits dev environments](https://daily.dev/posts/another-npm-supply-chain-worm-hits-dev-environments-birdicj09) · The Register · 0 upvotes · 0 comments - [Mini Shai-Hulud strikes again: npm worm compromises hundreds of @antv packages](https://daily.dev/posts/mini-shai-hulud-strikes-again-npm-worm-compromises-hundreds-of-antv-packages-gsrjcznzd) · Aikido Security · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cicd](https://daily.dev/tags/cicd), [#malware](https://daily.dev/tags/malware), [#npm](https://daily.dev/tags/npm), [#mcp](https://daily.dev/tags/mcp) [View this post on daily.dev](https://daily.dev/posts/sandworm-mode-shai-hulud-style-npm-worm-hijacks-ci-workflow--833azp617) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflow...","url":"https://daily.dev/posts/sandworm-mode-shai-hulud-style-npm-worm-hijacks-ci-workflow--833azp617","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/sandworm-mode-shai-hulud-style-npm-worm-hijacks-ci-workflow--833azp617"},"datePublished":"2026-02-20T19:00:55.303Z","dateModified":"2026-02-26T17:32:10.586Z","description":"Socket's Threat Research Team has uncovered SANDWORM_MODE, an active npm supply chain worm campaign spanning at least 19 malicious packages published under two...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7d9d2a5220e5a2c78ebc5dca1c9e2107?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7d9d2a5220e5a2c78ebc5dca1c9e2107?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Socket","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Socket","logo":"https://media.daily.dev/image/upload/s---oEn9czC--/f_auto/v1716187892/logos/socketdev","url":"https://daily.dev/sources/socketdev"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/sandworm-mode-shai-hulud-style-npm-worm-hijacks-ci-workflow--833azp617","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cicd,malware,npm,mcp","timeRequired":"PT30M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Socket","item":"https://daily.dev/sources/socketdev"},{"@type":"ListItem","position":3,"name":"SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflow..."}]} ```