Storia in 10 fonti

New Shai-Hulud malware wave compromises 600 npm packages

Threat actors earlier today published more than 600 malicious packages to the Node Package Manager (npm) index as part of a new Shai-Hulud supply-chain campaign.

Raccontata da

Confronto fonti

6 prospettive sulla stessa storia

AI · summaries

bleepingcomputer.comStai leggendo1 mesi fa

New Shai-Hulud malware wave compromises 600 npm packages

Threat actors earlier today published more than 600 malicious packages to the Node Package Manager (npm) index as part of a new Shai-Hulud supply-chain campaign.

originale

Timeline cronologica

lunedì 18 maggio 2026·thehackernews.com
Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware
4 malicious npm packages with 3,006 downloads spread stealers and Phantom Bot, forcing removals and secret rotation.
lunedì 18 maggio 2026·bleepingcomputer.com
Leaked Shai-Hulud malware fuels new npm infostealer campaign
The Shai-Hulud malware leaked last week is now used in new attacks on the Node Package Manager (npm) index, as infected packages emerged over the weekend.

New Shai-Hulud malware wave compromises 600 npm packages

Confronto fonti

New Shai-Hulud malware wave compromises 600 npm packages

Timeline cronologica

Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware

Leaked Shai-Hulud malware fuels new npm infostealer campaign

Over 320 NPM Packages Hit by Fresh Mini Shai-Hulud Supply Chain Attack

Shai-Hulud keeps burrowing: 314 npm packages infected after another account compromise

Shai-Hulud: What to Know About the Malware Spreading Through Software Pipelines - Decrypt

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

GitHub Worm Hits npm Packages With 16M Downloads

AntV data visualization tool the latest to be hit by ongoing npm supply chain attacks

Shai-Hulud copycat worm infects yet another npm package

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

npm-Wurm Shai-Hulud: Angriff der Klone

Shai-Hulud keeps burrowing: 314 npm packages infected after another account compromise

New Shai-Hulud malware wave compromises 600 npm packages

Hackers have compromised dozens of popular open source packages in an ongoing supply chain attack | TechCrunch

GitHub Worm Hits npm Packages With 16M Downloads

Nuova ondata di attacchi colpisce centinaia di pacchetti npm

Hunderte bösartige npm-Pakete im AntV-Ökosystem entdeckt

Over 320 NPM Packages Hit by Fresh Mini Shai-Hulud Supply Chain Attack

Shai-Hulud: What to Know About the Malware Spreading Through Software Pipelines - Decrypt