… The company told BleepingComputer that the repositories were removed due to concerns that they distributed "potential malicious content." Multiple researchers confirmed that the repos were pulled after a compromise during a Miasma/Shai-Hulud supply-chain campaign. …
… Get the whitepaper Related Articles: DAEMON Tools trojanized in supply-chain attack to deploy backdoor New IronWorm malware hits 36 packages in npm supply-chain attack New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud attack ships signed malicious TanStack, Mistral npm packages Po… …
New IronWorm malware hits 36 packages in npm supply-chain attack By Bill Toulas June 4, 2026 11:25 AM A new supply-chain attack has infected 36 packages on the Node Package Manager npm index with infostealer malware called IronWorm. …
… Get the whitepaper Related Articles: GitHub disables Microsoft repos pushing password-stealing malware New IronWorm malware hits 36 packages in npm supply-chain attack New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud attack ships signed malicious TanStack, Mistral npm packages Po… …
… Get the whitepaper Related Articles: Shai Hulud attack ships signed malicious TanStack, Mistral npm packages New Shai-Hulud malware wave compromises 600 npm packages Popular node-ipc npm package compromised to steal credentials PyPI package with 1.1M monthly downloads hacked to push infostealer New… …
… Get the whitepaper Related Articles: New IronWorm malware hits 36 packages in npm supply-chain attack GitHub disables Microsoft repos pushing password-stealing malware New Shai-Hulud attack trojanizes 19 science-focused PyPI packages Red Hat npm packages compromised to steal developer credentials N… …