socket.devarticleSocket: Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music Scraping
Socket reports that AI music startup Suno was breached after the Shai-Hulud npm worm compromised a single employee's machine, harvesting GitHub and cloud credentials that a threat actor (ellie.191) later used to access Suno's source code, customer list, and Stripe payment data. The leaked source code confirmed Suno stream-ripped tracks from YouTube Music, Deezer, Genius, Pond5, Jamendo, Freesound, IMSLP, and ~1M hours of podcasts (via Bright Data proxies) to train its models, and dates the incident to November 2025, coinciding with Shai-Hulud's destructive second wave.
TL;DR Shai-Hulud's stolen credentials from one infected Suno employee cascaded into a full corporate breach exposing the AI music startup's scraping-based training pipeline.
Organisations named here
- RIAA
- Shai-Hulud
Technologies named here
- Bright Data
- Suno
- GitHub
- GitHub repositories
- Stripe
- npm packages
- CrowdStrike packages
- PodcastIndex
- PyPI
- Packagist
- npm
- CrowdStrike
Techniques named here
- Credential harvesting from developer/CI environments
- Exfiltration to public GitHub repository
- Worm propagation via malicious package republishing
- Destructive fallback
- AI toolchain poisoning
- Stream-ripping / web scraping for AI training data
Threat actors named here
- Shai-Hulud
- ellie.191
- SANDWORM_MODE
- Mini Shai-Hulud
Related in Supply Chain
