A Shai-Hulud wave plants hooks in .claude/settings.json and .vscode/tasks.json, so opening a repo runs the payload. Agent config is executable surface now.
The npm worm that installs itself into your coding agent
calendar_today
August 6, 2026
domain
workos