The ‘Miasma’ worm source code briefly leaked on GitHub
…Miasma appears to be an evolution of the earlier Shai-Hulud worm, which was previously leaked on GitHub and shares much of the same features, techniques, and even code. The malware infects…
Search
Filtered by topic: Shai-Hulud Clear ✕
All sources
bleepingcomputer.com
29
techcrunch.com
2
9to5mac.com
2
golem.de
1
about.gitlab.com
1
heise.de
1
tomshardware.com
1
pcper.com
1
neowin.net
1
arstechnica.com
1
appleinsider.com
1
notebookcheck.net
1
Tracked topic
Shai-Hulud
New IronWorm malware hits 36 packages in npm supply-chain attack
…This behavior is conceptually similar to Shai Hulud , which had its code published on GitHub recently. Although JFrog researchers did not find a clear connection between IronWorm and Shai Hulud, they observed…
OpenAI confirms security breach in TanStack supply chain attack
…The company says the breach is linked to the recent "Mini Shai-Hulud" supply-chain campaign by the TeamPCP extortion gang, which targeted developers by slipping malicious updates into trusted and popular…
GitHub announces npm security changes to tackle supply-chain attacks
…GitHub disables Microsoft repos pushing password-stealing malware New IronWorm malware hits 36 packages in npm supply-chain attack New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud attack ships…
Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials
…Shai Hulud attack ships signed malicious TanStack, Mistral npm packages New Shai-Hulud attack trojanizes 19 science-focused PyPI packages Leaked Shai-Hulud malware fuels new npm infostealer campaign Popular node-ipc…
Hola Browser for Windows compromised to deliver cryptominer
…DAEMON Tools trojanized in supply-chain attack to deploy backdoor New IronWorm malware hits 36 packages in npm supply-chain attack New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud…
New TCLBanker malware self-spreads over WhatsApp and Outlook
…New GoGra malware for Linux uses Microsoft Graph API for comms Cybercrime service disrupted for abusing Microsoft platform to sign malware New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud…
Grafana breach caused by missed token rotation after TanStack attack
…In the ongoing Shai-Hulud malware campaign attributed to TeamPCP hackers, dozens of TanStack packages infected with credential-stealing code were published on the npm index, compromising developer environments, including Grafana's…
Hackers backdoor Jscrambler npm package with infostealer malware
…Popular node-ipc npm package compromised to steal credentials New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud attack ships signed malicious TanStack, Mistral npm packages New IronWorm malware hits…
Ukraine identifies infostealer operator tied to 28,000 stolen accounts
…Australia warns of ClickFix attacks pushing Vidar Stealer malware New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud attack ships signed malicious TanStack, Mistral npm packages INTERPOL ‘Operation Ramz’ seizes…