Assertion Supported AI assessment confidence: 95% certainty 4/5 debate potential 1/5

Aboukhadijeh: Threat Actors Open-Sourced a Vibe-Coded NPM Malware Toolkit

Feross Aboukhadijeh · AI Is Learning to Hack. Faster Than We Expected. · Aug 6, 2026 · at 13:56

Feross Aboukhadijeh, CEO of Socket, discusses how threat actors are using AI vibe coding to construct and distribute software supply chain malware.

0:00 / 0:11exact quote · 11.7s

▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark

“One of the threat groups actually kind of posted their, you know, open source to their kind of vibe coded toolkit for others to use to be able to do this. You know, we've seen copycat attacks happen since then.”

quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →

The claim, plainly

A cyber threat group open-sourced an AI vibe-coded malware toolkit for NPM worm attacks, leading to copycat attacks.

a quote alone can be ambiguous, so this restates it with the references and context of the conversation around it resolved. AI-written; the tape below the player is the source.

Assessment

The claim is fully corroborated by threat intelligence reports. On May 12, 2026, the threat group TeamPCP (tracked as UNC6780) released the open-source code for their self-propagating npm worm toolkit, 'Shai-Hulud' (and 'Mini Shai-Hulud'), on GitHub under an MIT license, explicitly branding the codebase as 'vibe coded' in the repository README. Security analysis from firms including OX Security confirmed the use of AI/vibe-coding patterns. Furthermore, multiple threat intelligence reports from OX Security, SANS Internet Storm Center, Vectra AI, Zscaler, and Palo Alto Networks Unit 42 documented immediate and subsequent copycat attacks, repository forks, and derived worm waves (such as the Miasma payload and ChainDrop outbreak) through June–August 2026.

On May 12, 2026, threat group TeamPCP published their npm supply chain worm 'Shai-Hulud' on GitHub under an MIT license, with the README stating: 'Is it vibe coded? Yes.'
OX Security published a report on May 17, 2026 titled 'New Actors Deploy Shai-Hulud Clones: TeamPCP Copycats Are Here', confirming malicious npm packages deployed by copycat threat actors using the open-sourced toolkit.
Subsequent threat advisories from SANS Internet Storm Center (June 2026) and Palo Alto Networks Unit 42 (July–August 2026) confirmed active in-the-wild npm worm propagation waves driven by copycats utilizing the published framework.

Checked against

[1] tenable.com [2] zscaler.com [3] phoenix.security [4] vectra.ai [5] scworld.com [6] reversinglabs.com [7] antiy.net [8] ox.security

"TeamPCP" "Shai-Hulud" "vibe-coded" malware npm "TeamPCP" "MIT license" "TeamPCP" "vibe coded" OR "vibe-coded" cyber threat group open source npm worm toolkit "open source" "npm worm" toolkit "TeamPCP" npm worm

assessed as of 2026-08-16

This assessment is an AI reading of a public statement, made against the cited references with the confidence shown. It can be wrong. The quote, the tape and the references are all on this page; if something is off, use report an error below. full disclaimer →

Mentioned

npm Socket Security

⚑ Spot an error? Report it

More from Feross Aboukhadijeh

Assertion Supported

Aboukhadijeh: Rival frontier models share universal hallucinations for non-existent software packages

“There was a research published recently about what they're calling kind of like universal type of squats or universal hallucinations where all the frontier models all have the same make the same mistake and sort of assume there are certain packages that exist …”

Feross Aboukhadijeh Aug 6, 2026 ▶ 4:06 AI Is Learning to Hack. Faster Than We Expected.

Assertion Not checkable as stated

Aboukhadijeh: Frontier AI Models Drastically Shrink Time to Exploit Vulnerabilities

“The frontier models are gonna cause, you know, a, you know, they are causing kind of a massive reduction in the time between the vulnerability discovery and vulnerability exploitation.”

Feross Aboukhadijeh Aug 6, 2026 ▶ 7:50 AI Is Learning to Hack. Faster Than We Expected.

Assertion Not checkable as stated

Aboukhadijeh: AI prompt payloads evade traditional endpoint detection and response tools

“A lot of times the payloads are actually prompts and that, that bypasses a lot of you know, typical kind of EDR tooling, because, you know, it's just like a markdown file that your cloud is running.”

Feross Aboukhadijeh Aug 6, 2026 ▶ 14:36 AI Is Learning to Hack. Faster Than We Expected.

Insight

Aboukhadijeh: Unvetted public package registries are the easiest targets for attackers

“They're gonna pick the easiest way in, and the lowest hanging fruit now has become, you know, just publishing malware to public registries because they know that there's no vetting happening and, you know, developers are likely to install them.”

Feross Aboukhadijeh Aug 6, 2026 ▶ 3:52 AI Is Learning to Hack. Faster Than We Expected.

Assertion Not checkable as stated

Aboukhadijeh: Attackers Time NPM Worms for RSA and Black Hat

“I noticed the attackers seemed to pick RSA and Black Hat as the times they wanted to start these NPM worms.”

Feross Aboukhadijeh Aug 6, 2026 ▶ 21:14 AI Is Learning to Hack. Faster Than We Expected.

Aboukhadijeh: Threat Actors Open-Sourced a Vibe-Coded NPM Malware Toolkit

More from Feross Aboukhadijeh

Turn any episode into a week of clips.