Socket reports that version 1.0.1 of the strutil-core gem ran a Shai-Hulud derived worm during install, taking cloud, CI, registry, SSH and AI tool credentials. It also added an MCP server and session hooks to local AI tool settings, and committed files such as AGENTS.md and CLAUDE.md to repositories using stolen Git access. If the stolen GitHub token is revoked, a monitor can delete the home directory, so Socket advises stopping its services before revoking that token. Teams should search lockfiles, CI caches and images for the gem, then check AI tool configs for unfamiliar entries.
