GitHub NPM Supply Chain Attack - Investigation Report
Date: May 29, 2026
Case ID: ONCHAIN-2026-0529-002
Threat Names: Megalodon, Mini Shai-Hulud
Status: Active - Ongoing Crisis
GitHub NPM Supply Chain Attack - Investigation Report Date: May 29, 2026 Case ID:...
GitHub NPM Supply Chain Attack - Investigation Report
Date: May 29, 2026
Case ID: ONCHAIN-2026-0529-002
Threat Names: Megalodon, Mini Shai-Hulud
Status: Active - Ongoing Crisis

Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks

Shai-Hulud malware worms Red Hat npm package versions downloaded 80K times a week

New IronWorm malware hits 36 packages in npm supply-chain attack

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm

Supply Chain Attack Hits 32 Red Hat NPM Packages