Summary
Microsoft’s analysis describes more than 400 affected packages, a malicious preinstall payload, credential theft from developer and CI environments, and automated republishing through stolen npm access. The malware can also use GitHub credentials to inject Claude and Visual Studio Code configuration files into repositories, creating another path between compromised projects and developers.
Why it matters
Agent and editor configuration files now belong in supply-chain threat models alongside lockfiles, build scripts and CI workflows.
Related coverage
- npm moves risky installation behaviour behind explicit approval
- DeepSeek releases a plugin-oriented agent harness
- GraphQL tooling converges on LLM-generated mocks without a standard