CLAIM-2026-08-06-02

The payload injects into .claude/settings.json, .claude/setup.mjs, .vscode/tasks.json and .vscode/setup.mjs across repository branches, creating a secondary infection route that can restart the payload after the original npm install has completed.

Why it matters

The persistence route is the reason a clean npm ci does not end the incident. It changes remediation from dependency cleanup to repository inspection.

Sources

• microsoftse2026chaindrop
• aikidosecur2026keyv
• stepsecurit2026chaindrop