🎯 System/environment reconnaissance

The items that name it 2

• Shai-Hulud 2 Malware Campaign Targets GitHub and Cloud Credentials Using Bun Runtime | Blog | Endor Labs
  writeup2026-09-11

  Malware profiles OS type, architecture, hostname, local user info, account metadata, and GitHub Actions runner environment details (contents.json, environment.json)

• Compromised PyPI Package: mrmustard 0.7.4 Steals SSH, Cloud, and Kubernetes Credentials
  writeup2026-07-25

  Collects hostname, username, OS, Python version, working directory, id output, public IP via ifconfig.me, pip freeze package list, nvidia-smi GPU details, and SLURM job queue via squeue.