DevDefender on Mythryl: “shoutout to the @socket.dev team for the incredible report.”

SANDWORM_MODE is a supply chain worm that has similarities to Shai-Hulud and poisons AI Agents using an innocuous-looking MCP server installed on the developer machine.

devdefender.netSANDWORM_MODE: npm Worm Poisoning AI ToolchainsSocket’s Threat Research Team dropped an incredibly detailed report on a Shai-Hulud-like supply chain worm that affects 19+ malicious npm packages. NPM Worm Credential Harvesting From their announc...

Post