Search

Showing top 47 results for "Shai-Hulud"

Shai-Hulud

35 articles indexed Last updated 23h ago See topic hub

Videos

Leaked Shai-Hulud malware fuels new npm infostealer campaign

… Researchers at OXsecurity, a company that secures applications from code to runtime, discovered the malicious uploads over the weekend and noticed that the threat actor used misspelled names typosquatting targeting Axios users, and some generic ones: chalk-tempalte – Shai-Hulud clone information st… …

May 18, 2026 · Bill Toulas

New Shai-Hulud malware wave compromises 600 npm packages

… Given that Shai Hulud's code was recently leaked on GitHub by the TeamPCP threat group, and has already been used in attacks , attribution of the new Shai-Hulud campaign is more difficult. …

May 19, 2026 · Bill Toulas

Mini-Shai-Hulud: Erneut millionenfach genutzte NPM-Pakete kompromittiert - Golem.de

… Diese enthalten jeweils die Zeichenkette "niagA oG eW ereH :duluH-iahS" , was invertiert für "Shai-Hulud: Here We Go Again" steht. …

May 19, 2026 · Marc Stöckel

Red Hat npm packages compromised to steal developer credentials

… Download Now Related Articles: Bitwarden CLI npm package compromised to steal developer credentials New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud attack ships signed malicious TanStack, Mistral npm packages TeamPCP hackers advertise Mistral AI code repos for sale OpenAI confir… …

Jun 1, 2026 · Lawrence Abrams

Discussions and forums

r/netsec · u/Upstairs_Safe2922 · 2w ago

durabletask (Microsoft's Python Durable Task client) compromised by TeamPCP | same Mini Shai-Hulud payload as last week's TanStack wave

We've been tracking TeamPCP since March. This is the fifth major package in the same campaign. Full chronology: Mar 19 — Trivy compromised. CI/CD secrets harvested downstream. Mar 24 — LiteLLM 1.82.7/1.82.8 to PyPI via c…

Compromised Mistral AI and TanStack packages may have exposed GitHub, cloud and CI/CD credentials in 'mini Shai Hulud' malware infection — supply-chain campaign spreads across npm and AI developer ecosystems like wildfire

… Microsoft has not publicly attributed the PyPI compromise to Mini Shai-Hulud. …

May 12, 2026 · Etiido Uko

GitHub disables Microsoft repos pushing password-stealing malware

… Get the whitepaper Related Articles: New Shai-Hulud attack trojanizes 19 science-focused PyPI packages New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud attack ships signed malicious TanStack, Mistral npm packages New IronWorm malware hits 36 packages in npm supply-chain attack Gr… …

Jun 9, 2026 · Bill Toulas

Hackers have compromised dozens of popular open source packages in an ongoing supply-chain attack | TechCrunch

… Researchers have dubbed the hacks “Mini Shai-Hulud,” after the attack followed a previous, more expansive hacking campaign. …

May 19, 2026 · Lorenzo Franceschi-Bicchierai

The ‘Miasma’ worm source code briefly leaked on GitHub

… Get the whitepaper Related Articles: New IronWorm malware hits 36 packages in npm supply-chain attack GitHub disables Microsoft repos pushing password-stealing malware New Shai-Hulud attack trojanizes 19 science-focused PyPI packages Red Hat npm packages compromised to steal developer credentials N… …

Jun 10, 2026 · Bill Toulas

OpenAI confirms security breach in TanStack supply chain attack

… Download Now Related Articles: TeamPCP hackers advertise Mistral AI code repos for sale Official SAP npm packages compromised to steal credentials Shai Hulud attack ships signed malicious TanStack, Mistral npm packages Bitwarden CLI npm package compromised to steal developer credentials Trivy vulne… …

May 14, 2026 · Lawrence Abrams

New IronWorm malware hits 36 packages in npm supply-chain attack

… This behavior is conceptually similar to Shai Hulud , which had its code published on GitHub recently. Although JFrog researchers did not find a clear connection between IronWorm and Shai Hulud, they observed the same commit names in both supply-chain attacks. …

Jun 4, 2026 · Bill Toulas

Followed topics