Malware & Threats
The most recent variants of the self-propagating attacks are named Miasma and Hades.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Shai-Hulud"
Malware & Threats
At least one threat actor has adopted the recently released malware source code in attacks against NPM developers.
Malware & Threats
The hacking group is encouraging miscreants to use the code in supply chain attacks, promising monetary rewards.
Supply Chain Security
The compromised Lightning and Intercom packages have a combined monthly download count of nearly 10 million.
Malware & Threats
The Mini Shai-Hulud attack introduced a preinstall hook to fetch and execute a Bun binary and bypass security monitoring.
Supply Chain Security
Tied to a fresh Checkmarx supply chain attack claimed by TeamPCP, the incident references the Shai-Hulud worm.
Malware & Threats
The malicious code propagates like a worm, poisons AI assistants, exfiltrates secrets, and contains a destructive dead switch.
Application Security
The worm exposed Trust Wallet’s Developer GitHub secrets, allowing attackers to publish a backdoor extension and steal funds from 2,520 wallets.
Supply Chain Security
The new self-replicating worm iteration has destructive capabilities, erasing home directory contents if it cannot spread to more repositories.
Application Security
The packages were injected with malicious code to harvest secrets, dump them to a public repository, and make private repositories public.
Supply Chain Security
The hackers exfiltrated data from Salesforce instances of Klue customers, such as Huntress and Recorded Future.
Data Breaches
Vulnerabilities
Hacker Conversations
Artificial Intelligence
French President Emmanuel Macron urged the world’s wealthy democracies to work together on regulating advanced AI systems.
Malware & Threats
Malware & Threats
