Tracked topic
…GitHub disables Microsoft repos pushing password-stealing malware New IronWorm malware hits 36 packages in npm supply-chain attack New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud attack ships…
Shai Hulud attack ships signed malicious TanStack, Mistral npm packages By Bill Toulas May 12, 2026 07:29 AM Hundreds of packages across npm and PyPI have been compromised in a new…
…New GoGra malware for Linux uses Microsoft Graph API for comms Cybercrime service disrupted for abusing Microsoft platform to sign malware New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud…
…In the ongoing Shai-Hulud malware campaign attributed to TeamPCP hackers, dozens of TanStack packages infected with credential-stealing code were published on the npm index, compromising developer environments, including Grafana's…
We've been tracking TeamPCP since March. This is the fifth major package in the same campaign. Full chronology: Mar 19 — Trivy compromised. CI/CD secrets harvested downstream. Mar 24 — LiteLLM 1.82.7/1.82.8 to PyPI via c…
A process can't leak a secret it never had.Shai-hulud, prompt-injection - you name it. They cannot steal what your agent (or an process) don't have.I run coding agents (Claude Code, Codex) on my own machines most of the …
…Australia warns of ClickFix attacks pushing Vidar Stealer malware New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud attack ships signed malicious TanStack, Mistral npm packages INTERPOL ‘Operation Ramz’ seizes…
…DAEMON Tools trojanized in supply-chain attack to deploy backdoor New IronWorm malware hits 36 packages in npm supply-chain attack New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud…
…New IronWorm malware hits 36 packages in npm supply-chain attack Chinese hackers use new Atlas RAT malware in European cyberattacks New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud…
…Shai Hulud attack ships signed malicious TanStack, Mistral npm packages New npm supply-chain attack self-spreads to steal auth tokens PyPI package with 1.1M monthly downloads hacked to push infostealer…
…distinct pieces of software . They’ve even automated their attacks using a tool dubbed Mini Shai-Hulud which is a really nasty self-spreading worm. Once it steals a single set of…
…For background, Miasma is a variant of the Mini Shai-Hulud worm, open-sourced by the threat group TeamPCP. It started its journey by compromising a Red Hat employee's GitHub account…
