Sponsored https://www.ebay.com/shop/shai-hulud?_nkw=shai+hulud&mkcid=1&mkrid=711-53200-19255-0&siteid=0&campid=5339165021&customid=&toolid=10001&mkevt=1
shai hulud | Shop on eBay
https://slsa.dev/blog/2026/05/mini-shai-hulud-what-slsa-can-and-cannot-do
SLSA • Mini Shai-Hulud: Where SLSA's Boundaries Fall
May 15, 2026 - The Mini Shai-Hulud npm supply chain attack chained GitHub Actions misconfiguration, cache poisoning, and OIDC token theft to publish malicious packages under...
shai huludslsaminiboundariesfall
https://isotope13.io/compendium/2026/ts-dna/
ts-dna npm package carried Shai-Hulud - isotope¹³
JFrog listed 1 ts-dna npm package in the May 2026 Shai-Hulud wave. This record scopes those artifacts to their own official distribution surface.
npm packageshai huluddnacarried
https://www.crimsonvista.com/blog/shai-hulud-npm-worm-attack
Shai-Hulud 2.0: The Worm Strikes Back | Crimson Vista
The malware plaguing the npm software registry spreads like the sandworms of Dune, replicating across hundreds of packages in a massive supply chain attack.
shai huludthe wormstrikes backcrimsonvista
https://www.saladdaysmag.com/shai-hulud-reach-beyond-the-sun/
Shai Hulud ‘Reach Beyond The Sun’ | Salad Days Magazine
shai huludsalad daysbeyondmagazine
https://trendtechnews.com/trust-wallet-chrome-extension-hack-drains-8-5m-via-shai-hulud-supply-chain-attack/
Belief Pockets Chrome Extension Hack Drains $8.5M by way of Shai-Hulud Provide Chain Assault –...
by way ofchrome extensionshai huludbeliefpockets
https://pulse.astek.net/timeline/cloud/2026-08-mini-shai-hulud-l-attaque-sur-keyv-et-cacheable-touche-des-paquets-a-plus-de-2-m
Mini Shai-Hulud: the keyv and cacheable attack hits packages with over 2 billion monthly downloads...
On 4 August 2026, after the hijacking of its maintainer's GitHub account, about ten npm packages of the keyv and cacheable family are booby-trapped by a...
shai huludminikeyvcacheableattack
https://radar.offseq.com/threats?tag=mini%20shai-hulud
Threats Tagged 'mini shai-hulud' | Threat Radar
Cyber threats tagged with 'mini shai-hulud'. View detailed information about related vulnerabilities, malware, and attack campaigns.
shai huludthreatstaggedminiradar
https://www.trendaisecurity.com/es-es/resources-insights/trendai-security-blog/shai-hulud-2-0-targets-cloud-and-developer-systems
Shai-hulud 2.0 Campaign Targets Cloud and Developer Ecosystems | TrendAI (ES)
Shai-hulud 2.0 campaign features a sophisticated variant capable of stealing credentials and secrets from major cloud platforms and developer services, while...
shai huludcampaigntargetsclouddeveloper
https://tccubed.com/2026/09/16/ai-coding-security-risks-shai-hulud-attack/
AI Coding Security Risks: What the Shai-Hulud Attack Means
Sep 16, 2026 - AI coding security risks exposed: A hijacked coding assistant infected 100+ repositories with malware. Learn how SMBs can protect development teams using AI...
ai codingsecurity riskswhat theshai huludattack
https://lecollectif.net/blog/lovable-mcp-shai-hulud-pattern-architecture
Lovable, MCP, Shai-Hulud : 3 incidents, 1 pattern d'architecture
Jun 5, 2026 - Trois failles IA majeures en 8 jours d'avril 2026. Pas trois accidents : un même pattern d'architecture, et trois réflexes pour le corriger.
shai huludlovablemcpincidentspattern
https://www.ox.security/category/shai-hulud/
Shai-Hulud Archives | OX Security
A Shai-Hulud Miasma evolution supply chain attack targets AsyncAPI packages, injecting a multi-staged dropper into developer tools downloaded millions of times...
shai huludarchivessecurity
https://gonzalovaras.cl/el-ataque-shai-hulud-que-infecto-2-mil-millones-de-descargas-npm-cuando-tu-npm-install-se-convierte-en-pesadilla/
El ataque Shai-Hulud que infectó 2 mil millones de descargas npm: cuando tu ‘npm install’ se...
shai huludmil millonesataquedescargasnpm
https://runtimerebel.com/blog/320-antv-npm-packages-compromised-in-mini-shai-hulud-attack
320+ @antv NPM Packages Compromised in Mini Shai-Hulud Attack | RuntimeRebel
May 20, 2026 - A maintainer account compromise has led to a major supply chain attack against Alibaba’s @antv NPM namespace, impacting over 320 visualization packages.
shai huludantvnpmpackagescompromised
https://labs.cosmicbytez.ca/news/2026-09-26-compromised-github-actions-resume-mini-shai-hulud-malware
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware |...
Sep 26, 2026 - Two actions-cool GitHub Actions, compromised in May 2026, silently reactivated their credential-stealing payload after repos were restored uncleaned.
github actionscame backshai huludcompromisedonline
https://full-net.cz/en/shai-hulud-npm-attack-hit-packages-with-2-billion-monthly-downloads/
Shai-Hulud npm Attack Hit Packages With 2 Billion Monthly Downloads | FullNet servis
Sep 3, 2026 - The Shai-Hulud supply chain attack hit over 1,300 npm package versions with 2 billion monthly downloads. How it works and how to respond.
shai huludnpmattackhitpackages
https://www.asciiarena.se/release/H%5EO-AYOH.TXT
Ayohee by Shai Hulud (1998) | aSCIIaRENA
ASCII art release: Ayohee by Shai Hulud
shai hulud
https://pypi.org/project/shai-hulud-detector/
shai-hulud-detector · PyPI
A CLI tool to detect potential Shai Hulud npm-worm compromises in GitHub users and organizations.
shai huluddetectorpypi
https://www.larebelion.com/2026/09/ia-de-codigo-secuestrada-ataque-shai.html
IA de Codigo Secuestrada Ataque Shai-Hulud en Repositorios
¡Atención desarrolladores! Una noticia alarmante sacude el mundo de la programación: un atacante ha logrado secuestrar una sesión de un asis...
shai huludsecuestradaataquerepositorios