2026-07-23NOTABLECrowdStrike documents SANDWORM_MODE, an npm worm that abuses AI coding-assistant MCP configs and git hooks to harvest developer credentials
Visual Studio Code
product · product:visual-studio-code single-source
Coverage
1
first 2026-07-23 → last 2026-07-23
Latest activity
2026-07-23
CrowdStrike documents SANDWORM_MODE, an npm worm that abuses AI coding-assistant MCP configs and git hooks to…
Peak priority
notable
1 notable
Targets
public-sector
sectors: public-sector, technology
Sources cited
2
2 hosts
Defender insights
What each entry about Visual Studio Code tells a defender to do, newest first.
Triage
Story timeline
ATT&CK techniques (5 across 7 tactics)
5 techniques observed across 1 entry about this entity, derived from entry metadata and body evidence, never asserted without a published entry behind it · pinned to MITRE ATT&CK v20.0 · compare on the matrix · Navigator layer (JSON)
- Initial AccessSupply Chain Compromise: Compromise Software Supply Chain
- PersistenceEvent Triggered Execution
- Privilege EscalationEvent Triggered Execution
- StealthVirtualization/Sandbox Evasion
- Credential AccessUnsecured Credentials: Credentials In Files
- DiscoveryVirtualization/Sandbox Evasion
- Command and ControlApplication Layer Protocol: DNS
Initial Access TA0001
T1195.002Supply Chain Compromise: Compromise Software Supply Chain×1
Adversaries may manipulate application software prior to receipt by a final consumer for the purpose of data or system compromise. Supply chain compromise of software can take place in a number of ways, including manipulation of the application source code, manipulation of the update/distribution mechanism for that software, or replacing compiled releases with a modified version.
Evidence: 2026-07-23/sandworm-mode-npm-ai-toolchain-supply-chain-worm-mcp · ATT&CK page ↗
Persistence TA0003
T1546Event Triggered Execution×1
Adversaries may establish persistence and/or elevate privileges using system mechanisms that trigger execution based on specific events. Various operating systems have means to monitor and subscribe to events such as logons or other user activity such as running specific applications/binaries. Cloud environments may also support various functions and services that monitor and can be invoked in response to specific cloud events.
Evidence: 2026-07-23/sandworm-mode-npm-ai-toolchain-supply-chain-worm-mcp · ATT&CK page ↗
Privilege Escalation TA0004
T1546Event Triggered Execution×1
Adversaries may establish persistence and/or elevate privileges using system mechanisms that trigger execution based on specific events. Various operating systems have means to monitor and subscribe to events such as logons or other user activity such as running specific applications/binaries. Cloud environments may also support various functions and services that monitor and can be invoked in response to specific cloud events.
Evidence: 2026-07-23/sandworm-mode-npm-ai-toolchain-supply-chain-worm-mcp · ATT&CK page ↗
Stealth TA0005
T1497Virtualization/Sandbox Evasion×1
Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from Virtualization/Sandbox Evasion during automated discovery to shape follow-on behaviors.
Evidence: 2026-07-23/sandworm-mode-npm-ai-toolchain-supply-chain-worm-mcp · ATT&CK page ↗
Credential Access TA0006
T1552.001Unsecured Credentials: Credentials In Files×1
Adversaries may search local file systems and remote file shares for files containing insecurely stored credentials. These can be files created by users to store their own credentials, shared credential stores for a group of individuals, configuration files containing passwords for a system or service, or source code/binary files containing embedded passwords.
Evidence: 2026-07-23/sandworm-mode-npm-ai-toolchain-supply-chain-worm-mcp · ATT&CK page ↗
Discovery TA0007
T1497Virtualization/Sandbox Evasion×1
Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from Virtualization/Sandbox Evasion during automated discovery to shape follow-on behaviors.
Evidence: 2026-07-23/sandworm-mode-npm-ai-toolchain-supply-chain-worm-mcp · ATT&CK page ↗
Command and Control TA0011
T1071.004Application Layer Protocol: DNS×1
Adversaries may communicate using the Domain Name System (DNS) application layer protocol to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Evidence: 2026-07-23/sandworm-mode-npm-ai-toolchain-supply-chain-worm-mcp · ATT&CK page ↗
Entries about Visual Studio Code (1)
Co-occurring entities
Derived: referenced by the same focused operational entries (weekly summaries and report roundups don't count); ×N counts the shared entries.
Where this entity is cited
Source distribution
- crowdstrike.com1 (50%)
- securitybrief.com.au1 (50%)