🕵️ Mini Shai-Hulud

The items that name it 48

• “Black October” for AI Developer Platforms
  writeupas classification.key entities2026-10-30
• The OpenSourceMalware Show #26
  talkas classification.key entities2026-10-21
• The OpenSourceMalware Show #24
  talkas threat actors2026-10-09It is written here as Mini Shai-Hulud (worm).

  Open-sourced self-propagating worm template; this Tensorlake incident is described as at least the second attack built on it, following the August attack on keyv and cachable.

• Julio Bandeira de Melo (@juliobmelo) on X
  threadas classification.key entities2026-09-28
• Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
  writeupas threat actors2026-09-24It is written here as Mini Shai-Hulud (campaign; May 2026 compromise of actions-cool/issues-helper and actions-cool/maintain-one-comment, malicious content introduced May 18, 2026).

  campaign; May 2026 compromise of actions-cool/issues-helper and actions-cool/maintain-one-comment, malicious content introduced May 18, 2026

• Happy Birthday, Shai-Hulud
  articleas threat actors2026-09-18

  Wave arriving end of April 2026; a burst in May 2026 pushed more than 400 malicious versions across 172 packages in about five hours using hijacked OIDC tokens with no stolen credentials

• The OpenSourceMalware Show #20
  talkas classification.key entities2026-09-09
• Socket: When Autonomous Agents Escape
  articleas threat actors2026-08-30

  Active credential-stealing campaign embedding fake prompt-injection headers to fool AI-assisted review tools into marking code as benign

• Shai-Hulud was the best thing to happen to supply chain security
  articleas classification.key entities2026-08-24
• The State of Open Source Supply Chain Attacks
  articleas classification.key entities2026-08-23
• Socket: PHP and Composer Support Reaches Beta With Reachability Analysis
  articleas threat actors2026-08-22

  Malware/campaign that jumped from npm to Packagist through a malicious version of Intercom's PHP package, abusing Composer plugin execution to steal cloud and CI/CD credentials; observed in April

• 77 "Evil Twin" Open VSX Extensions
  articleas threat actors2026-08-08

  Self-propagating credential-stealing worm variant delivered via a large, heavily obfuscated Bun-based JavaScript payload, executed through npm preinstall lifecycle hooks; part of the ChainDrop campaign, per Microsoft

• The OpenSourceMalware Show #16
  talkas threat actors2026-08-08

  Open-sourced worm malware; basis for the new npm worm that compromised Keyv and Cacheable in August 2025

• keyv and cacheable npm Package Hijacked in Supply Chain Attack
  writeupas classification.key entities2026-08-04
• PolinRider Caused Dozens of npm, Go, PHP Compromises
  writeupas threat actors2026-07-31

  Cited as a notorious worm example, contrasted with PolinRider.

• NPM Implements Pre-Publication Malware Scanning, But Will It Work?
  articleas threat actors2026-07-31

  Malware campaign that landed on npm despite npm's existing scanning

• OpenSourceMalware Blog
  articleas threat actors2026-07-18

  Self-spreading npm worm by TeamPCP; weaponizes tasks.json files (technique first seen in Lazarus Group campaigns); compromised 170 npm packages and crossed into PyPI; later hunt found 2,417 newly-compromised repos, pushing confirmed footprint to 4,367 poisoned repos across 2,152 owners; open-sourced

• Socket: Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music Scraping
  articleas threat actors2026-07-17

  Hit npm, PyPI, and Packagist in April and May 2026.

• Socket: Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages
  writeupas classification.key entities2026-06-27
• Socket: npm Package Uses Prompt Injection + Token Flooding to Evade AI Malware Scanners
  writeupas threat actors2026-06-17

  Recent npm supply-chain campaign whose packages embedded fake prompt-injection headers before obfuscated JavaScript payloads, designed to interfere with AI-assisted malware review; carried a credential-stealing payload not present in shai_hulululud.

• A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope
  writeupas threat actors2026-06-16
• Socket: pnpm 11.5 Fixes False Trust-Downgrade Alerts for npm Staged Publishes
  articleas classification.key entities2026-06-13
• npm v12 delivers one of the biggest security improvements in years
  articleas threat actors2026-06-11

  May 2026. Planted a preinstall hook that pulled the Bun runtime and ran a credential stealer. Moved through over a hundred packages across TanStack, UiPath, and Mistral AI; first npm worm to publish malware carrying valid build provenance.

• The OpenSourceMalware Show #8
  talkas classification.key entities2026-06-11
• Miasma & Hades Worms
  writeupas threat actors2026-06-10

  Broader supply chain campaign; this PyPI wave is connected to it

• Microsoft's durabletask PyPI Package Compromised in Supply Chain Attack
  writeupas threat actors2026-06-09

  Supply chain worm campaign operated by TeamPCP; associated with attacks on TanStack, Mistral AI, Guardrails AI, LiteLLM, OpenSearch, Telnyx, @antv, Checkmarx, and now durabletask

• Miasma Blight Reaches Microsoft: 73 Repos Disabled in 105 Seconds
  writeupas threat actors2026-06-06
• The OpenSourceMalware Show #7
  talkas threat actors2026-06-03It is written here as MiniShai Hulud (also called MiniShaiHulud).

  Worm open-sourced by TeamPCP; used in the Miasma campaign against Red Hat and other npm/PyPI/RubyGems packages; info-stealing capability described as grabbing broad credential data including HashiCorp vault credentials

• The Software Supply Chain Malware Landscape: January - May 2026
  articleas threat actors2026-06-03

  TeamPCP campaign that surged through May and dominated ATO-classified weekly malicious packages.

• Orca Security: Red Hat npm Packages Compromised in Supply-Chain Attack Spreading Credential-Stealing Worm
  articleas threat actors2026-06-02It is written here as Mini Shai-Hulud (open-sourced tooling).

  open-sourced tooling

• Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm
  writeupas threat actors2026-06-01

  Sophisticated credential-stealing worm malware that spreads by republishing backdoored versions of packages the victim account has access to; open-sourced by TeamPCP; payload self-identifies in one variant as "Shai-Hulud: The Third Coming"

• What MDM can't protect on developer machines (and what to do about it)
  articleas threat actors2026-05-28

  Compromised over 160 packages, including Mistral and TanStack, by stealing credentials from developer machines via a malicious postinstall hook; silently lifted npm and GitHub tokens and used them to publish malicious versions of the next package in the chain.

• Socket: Mini Shai-Hulud
  articleas threat actors2026-05-22

  Ongoing supply chain worm campaign that has run for three weeks as of the article, harvesting npm credentials and CI secrets to republish poisoned package versions; tracked by Socket at 1,055 compromised versions across 502 unique packages spanning npm, PyPI, and Composer

• Open Source Malware Podcast — episodes
  otheras threat actors2026-05-22

  Malware payload; resurfaced on npm; open-sourced version used as basis for a new npm worm hitting Keyv and cacheable; also referenced as 'Mini Shai Halud' by Team PCP

• Socket: Mini Shai-Hulud Hits @antv Ecosystem
  writeupas threat actors2026-05-20

  High-volume npm compromise pattern/campaign involving coordinated malicious publishes across packages tied to compromised maintainer accounts; campaign marker 'Shai-Hulud: Here We Go Again' (reversed) found in ~1.9k GitHub repositories with Dune-themed naming

• GitHub breached via a malicious VS Code extension: why developer devices are the real target
  articleas classification.key entities2026-05-20
• StepSecurity + Endor Labs: Mini-Shai-Hulud Wave 2
  writeupas threat actors2026-05-19It is written here as Mini-Shai-Hulud (Wave 2).

  Wave of the Mini Shai-Hulud npm worm compromising packages across Alibaba's AntV data visualization ecosystem via the compromised npm account 'atool'. Uses a CI/CD credential-stealing payload, exfiltrates via GitHub API dead-drop and a fake OpenTelemetry C2 server, creates public GitHub repositories

• Mini Shai-Hulud strikes again: npm worm compromises hundreds of @antv packages
  articleas threat actors2026-05-19

  Ongoing npm supply chain campaign tracked since April, spreading via compromised maintainer accounts and self-propagating by stealing npm tokens to republish malicious versions of packages. Waves: SAP wave, TanStack wave (169 packages), and this @antv wave. Uses Dune-themed GitHub repo names and rev

• FOSSA: Mini-Shai-Hulud Mass Compromise
  writeupas threat actors2026-05-18It is written here as Mini-Shai-Hulud.

  Coordinated supply-chain attack published malicious versions of at least 235 packages across npm and PyPI starting May 11, 2026; delivers install-time payload that harvests credentials and exfiltrates via Session messaging protocol; includes secondary C2 and IDE poisoning for persistence.

• VSCode Lifecycle Script Malware
  writeupas threat actors2026-05-16

  Financially-motivated npm worm that hit four SAP CAP packages and spread to over 1,000 repositories, using tasks.json runOn: folderOpen technique

• Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack
  writeupas threat actors2026-05-11

  npm supply-chain worm campaign that steals credentials from developer machines and CI/CD runners and uses them to compromise and publish more packages. Follow-up to an earlier April wave that targeted SAP npm packages via a Bun-based secret stealer. This wave detected across 373 malicious package-ve

• The complete GitHub Actions security checklist
  articleas classification.key entities2026-05-11
• Socket: pnpm 11 Adds Supply Chain Protection Defaults
  articleas threat actors2026-05-07

  Fresh supply chain campaign that compromised packages across npm, PyPI, and Packagist; used preinstall or import-time hooks to download a platform-specific Bun runtime and execute an obfuscated credential stealer targeting developer and CI/CD secrets.

• TeamPCP SAP CAP Attack
  writeupas threat actors2026-05-06
• Mini Shai-Hulud Worm (Apr–May 2026)
  articleas classification.key entities2026-05-06
• Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
  articleas threat actors

  Fresh campaign following the prior Shai-Hulud supply chain attack spree; repositories created by the attack contain the string 'Shai-Hulud: Here We Go Again'; over 170 packages affected across npm and PyPI, 518+ million cumulative downloads, 400+ repositories with stolen credentials created

• Dev Machine Guard Now Supports Windows - StepSecurity
  articleas threat actors

  Wave of attacks hitting TanStack and other widely used npm packages, including OIDC token theft from GitHub Actions runners; tracked by StepSecurity's research team in the last twelve months

• Dev Machine Guard Now Supports Linux - StepSecurity
  articleas threat actors

  wave hitting TanStack and other widely used npm packages, including OIDC token theft from GitHub Actions runners