Researchers identified ‘SANDWORM_MODE,’ a Shai-Hulud-style supply chain worm spread through typosquatted npm packages disguised with names like ‘suport-color’ and ‘claud-code.’ Beyond immediately stealing cryptocurrency wallet keys, the malware installs a rogue MCP server into the configuration of AI coding assistants — including Claude Code, Cursor, Windsurf, and Continue — using prompt injection to trick them into harvesting SSH keys, AWS credentials, npm tokens, and API keys for at least nine LLM providers. All known malicious packages have since been removed from npm.