What happened
NVD published CVE-2026-46412 (CVSS 10.0) on 2026-07-20 documenting a supply-chain compromise of the @beproduct/nestjs-auth npm package via a stolen publish token, with a credential-harvesting worm payload that specifically targets AI coding-agent configuration directories and propagates by committing hook configs via automated agent runtimes.
Why it matters
This campaign shows npm supply-chain worms evolving to specifically weaponize AI coding-agent automation (Claude Code / IDE agent hooks) as a propagation and persistence vector, turning developer AI assistants into an unwitting distribution mechanism for credential-stealing malware — a novel escalation beyond generic npm credential theft.
Attack vector
An attacker used a compromised npm publish token to push 18 malicious versions of the package between 2026-05-11 20:19–22:56 UTC. The postinstall payload harvested npm tokens, GitHub PATs/OAuth/OIDC tokens, AWS credentials, and Vault tokens, and is documented to commit `setup.mjs` plus hook configurations into `.claude/` and `.vscode/` directories via automated agent runtimes on PR branches — propagating through AI coding-agent workflows.
Affected systems
@beproduct/nestjs-auth npm package, versions 0.1.2 through 0.1.19
Mitigation
Remove any installed version in range >=0.1.2 <=0.1.19, clean npm cache, install the clean republished 0.1.20, rotate all credentials present at install time, scan for IoCs and reimage compromised hosts, and audit repository history for unexpected `.claude/`/`.vscode/` commits.