1
A Supply-Chain Worm Wrote Itself Into Claude Code's Hook Files to Survive Credential Rotation
供应链蠕虫藏身Claude Code钩子文件，绕过硬编码凭据轮换，攻防细节拉满。
Rotating your credentials and removing a poisoned package is supposed to end an npm supply-chain compromise. In early August 2026, one worm made sure …