Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain Attacks

Socket.dev research describes SANDWORM_MODE, a highly sophisticated multi-stage npm supply-chain worm that targeted AI-driven development pipelines by using obfuscated loaders, environment fingerprinting, credential and crypto-key exfiltration, propagation via npm/GitHub/SSH, persistence through global git hooks, compromise of AI assistants/LLM toolchains, multi-channel exfiltration, and a destructive fallback; the report also outlines detection engineering efforts and deployed detections protecting customers.