Malware & Threats
The malware was designed to steal and exfiltrate secrets, and to propagate itself via stolen NPM and GitHub credentials.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Mini Shai-Hulud"
Data Breaches
Hackers accessed Grafana’s GitHub repositories after a token compromised in the TanStack attack was not rotated.
Malware & Threats
A compromised maintainer account was used to publish malicious package versions across the @antv namespace.
Malware & Threats
Over 400 malicious versions of 170 packages were published as part of the new Mini Shai-Hulud campaign.
Supply Chain Security
The compromised Lightning and Intercom packages have a combined monthly download count of nearly 10 million.
Artificial Intelligence
The incident involved a testing environment set up by Irregular, similar to what Anthropic reported last week.
Vulnerabilities
Mobile & Wireless
Malware & Threats
Cybercrime
Connor Riley Moucka was extradited to the United States in July 2025 after he was arrested in Canada.
Artificial Intelligence
Artificial Intelligence
Vulnerabilities