# Shai-Hulud Published articles for Shai-Hulud. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## The npm worm that installs itself into your coding agent DevFeed: [The npm worm that installs itself into your coding agent]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-08-06T15:20:55Z Content type: article Language: en Sources: [WorkOS Blog]() Topics: [npm](), [Claude Code](), [Visual Studio Code](), [GitHub](), [JavaScript](), [Command-line interface]() Tags: [agent](), [claude-code](), [code](), [github](), [hooks](), [npm-worm](), [repo](), [shai-hulud](), [vscode](), [worm]() ### AI overview The article analyzes a Shai-Hulud npm worm that plants executable hooks in .claude/settings.json and .vscode/tasks.json. Opening a compromised repository can trigger the payload in VS Code or Claude Code, creating an attack path that install-time defenses may not detect. ### Source excerpt A Shai-Hulud wave plants hooks in .claude/settings.json and .vscode/tasks.json, so opening a repo runs the payload. Agent config is executable surface now. ## The keyv and cacheable npm Supply Chain Attack: Inside the Mini Shai-Hulud Campaign DevFeed: [The keyv and cacheable npm Supply Chain Attack: Inside the Mini Shai-Hulud Campaign]() Original publisher: [Read original article]() Published: 2026-08-04T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [npm](), [Malware](), [chainguard](), [GitHub](), [C2](), [Ethereum]() Tags: [aws](), [chainguard](), [ethereum](), [github](), [malware](), [mini-shai-hulud](), [npm](), [payload](), [shai-hulud](), [smart-contract](), [supply-chain]() ### AI overview The article examines a 2026 npm supply-chain attack in which a compromised maintainer account was used to publish malicious versions of keyv and cacheable-related packages. It reports credential theft, worm-like propagation to hundreds of downstream packages, and command-and-control infrastructure discovered through an Ethereum smart contract. It also explains that Chainguard customers were protected by malware scanning and package cooldowns. ### Source excerpt The latest npm supply chain attack hit keyv and cacheable. See how Chainguard's malware scanning and cooldowns kept customers protected. ## Chainguard Libraries now available on AWS Security Hub Extended DevFeed: [Chainguard Libraries now available on AWS Security Hub Extended]() Original publisher: [Read original article]() Published: 2026-08-04T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard libraries](), [AWS Security Hub](), [Security](), [software supply-chain attack](), [Malware](), [Open Source](), [Amazon Web Services]() Tags: [ai-coding](), [aws-security-hub](), [axios](), [chainguard-libraries](), [dependencies](), [java](), [javascript](), [litellm](), [malware](), [mini-shai-hulud](), [npm](), [open-source](), [python](), [redhat](), [redhat-cloud-services](), [security](), [shai-hulud](), [software-supply-chain](), [software-supply-chain-attack](), [telnyx]() ### AI overview Chainguard Libraries is now available through AWS Security Hub Extended's Supply Chain category. The article presents it as a malware-free catalog of Python, Java, and JavaScript dependencies intended to reduce reliance on public registries and help protect AWS workloads from software supply-chain attacks. ### Source excerpt Chainguard Libraries is now available in AWS Security Hub Extended, delivering malware-resistant open source dependencies for AWS workloads. ## Growing up the hard way DevFeed: [Growing up the hard way]() Original publisher: [Read original article]() Published: 2026-07-22T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Open Source](), [open-source-security](), [ai regulation](), [Artificial Intelligence](), [Security]() Tags: [chainguard-software-supply-chain-security](), [open-source](), [open-source-security](), [open-source-software](), [oss](), [security](), [shai-hulud](), [software-supply-chain-security](), [solarwinds](), [supply-chain](), [teampcp]() ### AI overview This opinion argues that open source is entering a difficult transition after supply-chain incidents, regulatory pressure, and the industrialization of malware. It forecasts that the Open Source definition will remain intact while enterprise and regulatory requirements change which open source software organizations are willing or permitted to consume, with AI-driven vulnerability discovery and poisoned distribution channels creating pressure on both fronts. ### Source excerpt Open source is growing up. Explore why AI, regulation, and enterprise security are reshaping how organizations consume open source software. ## Chainguard Launches Bugcrowd Bug Bounty With Up to $200,000 in Rewards DevFeed: [Chainguard Launches Bugcrowd Bug Bounty With Up to $200,000 in Rewards]() Original publisher: [Read original article]() Published: 2026-07-06T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Bug Bounty](), [Security](), [Vulnerabilities](), [Exploit](), [npm packages]() Tags: [bounty](), [bug-bounty](), [bugcrowd-bug-bounty](), [chainguard-bug-bounty](), [chainguard-security](), [exploit](), [malicious-packages](), [npm-packages](), [security](), [security-contest](), [shai-hulud](), [supply-chain](), [vulnerabilities]() ### AI overview Chainguard is running a Bugcrowd bug bounty from July 6-27, offering up to $200,000 to researchers who find vulnerabilities in its infrastructure and products. ### Source excerpt Chainguard launches a Bugcrowd bounty with up to $200K in rewards, inviting researchers to test its infrastructure against real-world attacks. ## Shai-Hulud Miasma: Inside the Compromise of Red Hat Packages DevFeed: [Shai-Hulud Miasma: Inside the Compromise of Red Hat Packages]() Original publisher: [Read original article]() Author: Roshan Piyush Published: 2026-06-05T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [npm packages](), [Malware](), [Security](), [CI/CD](), [Cloud](), [Encryption](), [Open Source]() Tags: [azure](), [ci-cd](), [encryption](), [gcp](), [malware](), [miasma](), [npm](), [npm-packages](), [security](), [shai-hulud](), [supply-chain]() ### AI overview This article examines the Miasma supply chain attack that compromised official Red Hat npm packages. It describes credential theft, abuse of trusted publishing and CI/CD pipelines, cloud identity enumeration, and per-infection payload encryption, while discussing mitigation. ### Source excerpt An in-depth look at the Miasma supply chain attack that compromised Red Hat npm packages. Learn how the malware spread, stole credentials, abused trusted publishing, and the steps teams can take to mitigate risk. | Blog ## Miasma Phantom Gyp npm attack: 57 packages, 286 malicious versions hijack CI/CD pipelines via binding.gyp DevFeed: [Miasma Phantom Gyp npm attack: 57 packages, 286 malicious versions hijack CI/CD pipelines via binding.gyp]() Original publisher: [Read original article]() Published: 2026-06-05T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [npm packages](), [Malware](), [Security](), [CI/CD](), [npm](), [chainguard libraries](), [chainguard]() Tags: [chainguard](), [chainguard-actions](), [chainguard-containers](), [chainguard-libraries](), [ci-cd](), [malware](), [miasma](), [npm-security](), [packages](), [phantom-gyp](), [shai-hulud](), [supply-chain]() ### AI overview This article describes the Miasma Phantom Gyp npm supply-chain attack, in which attackers published 286 malicious versions across 57 packages. The self-replicating worm targeted CI/CD pipelines, harvested credentials, poisoned additional packages, modified workflows, and planted backdoor configurations in AI coding assistant directories. It also explains that Chainguard customers were protected because Chainguard Libraries builds from source and blocked the malicious versions. ### Source excerpt A new npm supply chain worm compromised 57 packages and 286 versions. Learn how Chainguard blocked the attack and protected customers by design. ## Chainguard customers safe from Mini Shai-Hulud worm targeting @redhat-cloud-services npm packages with 100K+ weekly downloads DevFeed: [Chainguard customers safe from Mini Shai-Hulud worm targeting @redhat-cloud-services npm packages with 100K+ weekly downloads]() Original publisher: [Read original article]() Published: 2026-06-01T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [npm](), [Security](), [GitHub Actions](), [npm packages](), [GitHub](), [obfuscation](), [payload](), [OpenID connect (OIDC)]() Tags: [chainguard-actions](), [chainguard-libraries](), [endpoint-security](), [github](), [github-actions](), [malware](), [mini-shai-hulud](), [npm](), [obfuscation](), [oidc](), [packages](), [payload](), [red-hat](), [redhat-cloud-services](), [security](), [shai-hulud](), [tokens]() ### AI overview The article reports that the Mini Shai-Hulud worm compromised more than 90 @redhat-cloud-services npm packages through a hijacked GitHub account and GitHub Actions OIDC trusted publishing. The worm spreads tampered packages and malicious workflows, executes an obfuscated payload during installation, and steals cloud, Vault, GitHub, npm, and CI credentials. Chainguard customers using Chainguard Libraries for JavaScript and Chainguard Actions were unaffected. ### Source excerpt A new npm worm hit 90+ Red Hat packages. Chainguard customers stayed protected by blocking install-time scripts and hardening CI/CD workflows. ## Node-ipc compromised: Credential stealer targets package with 500k+ weekly downloads DevFeed: [Node-ipc compromised: Credential stealer targets package with 500k+ weekly downloads]() Original publisher: [Read original article]() Published: 2026-05-14T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [Malware](), [Node.js](), [Security](), [npm](), [Cloud](), [ssh](), [Kubernetes](), [Artificial Intelligence](), [API keys](), [CommonJS](), [Claude](), [Terraform]() Tags: [ai](), [api-keys](), [chainguard-libraries](), [ci-cd](), [claude](), [cloud](), [commonjs](), [dns](), [github](), [kubernetes](), [malware](), [microsoft](), [node](), [node-ipc](), [node-js](), [node-malware](), [node-worm](), [npm](), [npm-malware](), [payload](), [security](), [sha-256](), [shai-hulud](), [ssh](), [terraform]() ### AI overview Three malicious versions of the node-ipc npm package harvested and exfiltrated credentials from cloud providers, SSH, Kubernetes, CI/CD, version-control tools, and AI APIs. The article reports that Chainguard customers were not affected. ### Source excerpt Malicious node-ipc packages stole cloud, SSH, Kubernetes, and AI keys. Chainguard customers stayed protected through source-built libraries. ## Luck isn't a security control: What happened with mini Shai-Hulud and what you need to do DevFeed: [Luck isn't a security control: What happened with mini Shai-Hulud and what you need to do]() Original publisher: [Read original article]() Published: 2026-05-13T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [Malware](), [Open Source](), [GitHub Actions](), [npm](), [CI/CD](), [GitHub](), [AI-assisted coding](), [vulnerability]() Tags: [ai-coding-agents](), [chainguard-containers](), [chainguard-libraries](), [ci-cd](), [dependencies](), [github](), [github-actions](), [mini-shai-hulud](), [npm](), [packages](), [provenance](), [python](), [security](), [shai-hulud](), [software-supply-chain-security](), [supply-chain](), [worm]() ### AI overview This article examines the mini Shai-Hulud supply chain worm, which affected more than 400 packages. It argues that malicious code can enter during package build and distribution without a CVE, and that teams should strengthen preventive security across registries, GitHub Actions, CI/CD pipelines, dependencies, AI coding agents, and configuration files. ### Source excerpt A new supply chain worm hit 400+ packages. Learn why preventive security, not reactive patching, is the only way to stop the next attack. ## Chainguard artifacts safe from npm supply chain attack targeting SAP developer dependencies with 2.25M+ monthly downloads DevFeed: [Chainguard artifacts safe from npm supply chain attack targeting SAP developer dependencies with 2.25M+ monthly downloads]() Original publisher: [Read original article]() Published: 2026-04-29T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [npm](), [npm packages](), [chainguard](), [GitHub](), [container images](), [Bun](), [Node.js]() Tags: [bun](), [chainguard-containers](), [chainguard-libraries](), [github](), [malicious-packages](), [mini-shai-hulud](), [node-js](), [npm](), [npm-malware](), [npm-worm](), [sap](), [security](), [shai-hulud](), [supply-chain](), [tokens]() ### AI overview A Shai-Hulud-style npm supply-chain attack compromised four SAP Cloud Application Programming Model dependencies with more than 2.25 million combined monthly downloads. The malicious packages used a preinstall hook to download Bun and harvest GitHub tokens, npm tokens, and other developer secrets. Chainguard customers were protected because Chainguard Libraries for JavaScript does not build or serve packages containing install-time scripts, and Chainguard Factory terminated rebuilds when it detected the hook. ### Source excerpt New npm worm targets 2.25M-download packages. Chainguard customers stayed protected by blocking install-time scripts and malicious dependencies. ## Chainguard and Cursor partner to bring secure open source artifacts to agentic coding DevFeed: [Chainguard and Cursor partner to bring secure open source artifacts to agentic coding]() Original publisher: [Read original article]() Published: 2026-04-21T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [agentic-coding](), [cursor](), [chainguard containers](), [chainguard libraries](), [Security](), [Open Source](), [ai-coding]() Tags: [agentic-coding](), [ai-agents](), [chainguard](), [chainguard-containers](), [chainguard-cursor-partnership](), [chainguard-libraries](), [cursor](), [open-source](), [secure-open-source](), [security](), [shai-hulud](), [supply-chain]() ### AI overview Chainguard and Cursor are partnering to provide trusted, secure open source containers and libraries for agentic coding. The integration directs developers away from insecure public registries toward Chainguard Repository artifacts, helping reduce malware and software supply chain risks without slowing development. ### Source excerpt Chainguard and Cursor partner to secure AI-generated code with trusted, source-built containers and libraries, reducing risk without slowing developers. ## The Holiday Whisper: Shai-Hulud 3.0 DevFeed: [The Holiday Whisper: Shai-Hulud 3.0]() Original publisher: [Read original article]() Author: Lion Kontorer Published: 2025-12-29T05:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Malware](), [npm](), [Security](), [Vulnerabilities](), [GitHub]() Tags: [analysis](), [application-security](), [awareness](), [blog](), [ci-cd](), [code-security](), [compatibility](), [developer](), [devops](), [devsecops](), [github](), [incident-response](), [javascript](), [malware](), [node-js](), [npm](), [open-source-security](), [security](), [shai-hulud](), [snyk-open-source](), [snyk-security-intel](), [supply-chain-security](), [vulnerabilities](), [vulnerability-insights]() ### AI overview The article reports a contained Shai-Hulud malware variant called The Golden Path (v3.0), discovered in the @vietmoney/react-big-calendar npm package. The variant improves stealth, error handling, Windows and Bun compatibility, and cross-platform stability, while apparently testing targeted data exfiltration to GitHub repositories rather than conducting a widespread campaign. ### Source excerpt A refined variant of the Shai-Hulud malware, dubbed The Golden Path, has been discovered targeting the npm ecosystem during the holiday season. Security teams are encouraged to prioritize structural hardening, such as disabling lifecycle scripts, to mitigate risks during this testing phase. ## SHA1-Hulud, npm supply chain incident DevFeed: [SHA1-Hulud, npm supply chain incident]() Original publisher: [Read original article]() Author: Brian Vermeer Published: 2025-11-24T18:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [incident](), [npm](), [snyk](), [vulnerability](), [GitHub Actions](), [CI/CD](), [GitHub](), [Self-hosted](), [Cloud](), [Amazon Web Services](), [Azure](), [Google Cloud Platform (GCP)]() Tags: [awareness](), [blog](), [ci](), [ci-cd](), [cloud](), [cloud-infrastructure](), [developer](), [devrel](), [github](), [github-actions](), [incident](), [npm](), [security](), [self-hosted](), [sha1-hulud](), [shai-hulud](), [snyk](), [supply-chain](), [supply-chain-security](), [trust](), [vulnerability](), [vulnerability-insights](), [worm]() ### AI overview Snyk reports SHA1-Hulud, a second-wave npm supply chain attack and worm that spreads through trojanized packages with hidden preinstall scripts. The worm can compromise GitHub Actions self-hosted runners, inject malicious workflows, execute remote commands, exfiltrate GitHub and npm secrets, and search for AWS, Azure, and GCP credentials. Snyk identified more than 600 impacted npm packages and is retesting customer assets, notifying affected customers, and updating its vulnerability databases. ### Source excerpt Snyk identified a new supply chain attack in the npm ecosystem, referred to as SHA1-Hulud. We believe this is a second wave of the Shai-Hulud attack. Learn what this attack is and how Snyk is responding. ## Announcing Chainguard Libraries for JavaScript: Malware-Resistant Dependencies Built Securely from Source DevFeed: [Announcing Chainguard Libraries for JavaScript: Malware-Resistant Dependencies Built Securely from Source]() Original publisher: [Read original article]() Published: 2025-09-25T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard libraries](), [JavaScript](), [Malware](), [npm packages](), [npm]() Tags: [attacks](), [chainguard](), [chainguard-libraries](), [chainguard-libraries-for-javascript](), [javacript](), [javascript](), [language-library-security](), [malware](), [npm](), [npm-packages](), [package-compromise](), [provenance](), [shai-hulud](), [slsa]() ### AI overview Chainguard announces Chainguard Libraries for JavaScript, a source of trusted language-dependency builds intended to protect developers and organizations from compromised packages, malicious updates, and registry-based attacks. The libraries are built from source on hardened SLSA L2 infrastructure, include provenance, and are designed to fit existing developer workflows. ### Source excerpt Chainguard Libraries for JavaScript is designed to protect developers and organizations from compromised packages, malicious updates, and registry-based attacks. ## Zero-day Extensive NPM Package Compromise - Shai Hulud Supply Chain Attack DevFeed: [Zero-day Extensive NPM Package Compromise - Shai Hulud Supply Chain Attack]() Original publisher: [Read original article]() Author: Brian Clark Published: 2025-09-15T11:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Malware](), [npm packages](), [Cybersecurity](), [Angular](), [Bootstrap](), [GitHub Actions](), [API keys](), [GitHub](), [incident](), [Security](), [data](), [Front end]() Tags: [2025](), [angular](), [api-keys](), [awareness](), [blog](), [cybersecurity](), [developer](), [devrel](), [github](), [github-actions](), [incident](), [malware](), [npm](), [package-compromise](), [secrets](), [security](), [shai-hulud](), [supply-chain](), [supply-chain-security](), [worm]() ### AI overview This article reports the Shai-Hulud supply chain attack, in which malicious versions of ngx-bootstrap and other npm packages embedded malware to harvest developer tokens, cloud credentials, API keys, and other secrets. The malware exfiltrated data through webhooks and public GitHub repositories, targeted CI/CD environments through GitHub Actions, and spread across hundreds of compromised packages. The article recommends treating affected systems as compromised, removing the packages, rotating secrets from a trusted machine, and investigating for lateral movement. ### Source excerpt A supply chain attack hit the ngx-bootstrap npm package, embedding malware to steal developer credentials. See affected versions (e.g., 20.0.4-6, 19.0.3) and our playbook to contain the threat and rotate compromised secrets.