The npm worm plants autostart hooks in .claude/settings.json and .vscode/tasks.json

Sources: IDE persistence, analysis, discussion
Summary: Wiz records IDE persistence being written to the keyv repository from 09:00 UTC, before any package was published. Socket describes a SessionStart hook in .claude/settings.json and a folderOpen task in .vscode/tasks.json, both running the same loader when a developer or a coding agent opens the cloned repository, with no npm install required.
Why it matters: This is a second infection path that no npm-side control covers, so ignoring install scripts, pinning by integrity hash and release-age delays all sit on the wrong side of it.