Search: Shai-Hulud

Steam Workshop abused to spread malware via Wallpaper Engine app

…New Shai-Hulud malware wave compromises 600 npm packages Popular node-ipc npm package compromised to steal credentials Fake OpenAI repository on Hugging Face pushes infostealer malware GlassWorm malware attacks return via…

Jun 16, 2026 · Bill Toulas

Microsoft links Mastra AI supply chain attack to North Korean hackers

…in npm supply-chain attack Red Hat npm packages compromised to steal developer credentials New Shai-Hulud malware wave compromises 600 npm packages BlueNoroff Mastra AI Microsoft North Korea npm Saphire Sleet…

Jun 20, 2026 · Lawrence Abrams

CrowdStrike and Google take down botnet used by hackers to target open source software developers | TechCrunch

…Last week, hackers compromised several open source projects that pushed out malicious updates in a different hacking campaign that was called “Mini Shai-Hulud.” At least two OpenAI developers were compromised by…

May 27, 2026 · Lorenzo Franceschi-Bicchierai

For the 2nd time in weeks, Microsoft packages laced with credential stealer

…It’s essentially a clone of TeamPCP’s Mini Shai-Hulud toolkit, which the threat actor open-sourced recently. Security firm Cloudsmith said the malware harvests OIDC (OpenID-Connect) token credentials that…

Jun 8, 2026 · Dan Goodin

Another OpenAI hack puts ChatGPT Mac users on an update deadline

…OpenAI is forcing Mac users to update ChatGPT The company disclosed the incident on May 13 and confirmed malware linked to the "Mini Shai-Hulud" attack infected two employee devices…

May 14, 2026 · Andrew Orr

Over 116,000 Mincraft systems infected in WeedHack malware campaign

…fake outage pages to deliver malware BTMOB Android malware service generates custom phishing payloads New Shai-Hulud malware wave compromises 600 npm packages Gaming Information Stealer Infostealer MaaS Malware Malware-as-a…

Jun 2, 2026 · Bill Toulas

Over 116,000 Minecraft systems infected in WeedHack malware campaign

…fake outage pages to deliver malware BTMOB Android malware service generates custom phishing payloads New Shai-Hulud malware wave compromises 600 npm packages Gaming Information Stealer Infostealer MaaS Malware Malware-as-a…

Jun 2, 2026 · Bill Toulas

GitHub confirms breach of 3,800 repos via malicious VSCode extension

…developer code platforms, including GitHub , PyPI , NPM , and Docker , and, more recently, to the "Mini Shai-Hulud" supply chain campaign (which also impacted two OpenAI employees). VS Code extensions are plugins that…

May 20, 2026 · Sergiu Gatlan

New CrashStealer malware poses as Apple crash reporting tool

…SHub macOS infostealer variant spoofs Apple security updates Critical SimpleHelp flaw exploited to deploy new stealer malware Steam Workshop abused to spread malware via Wallpaper Engine app New Shai-Hulud malware wave…

Jul 13, 2026 · Bill Toulas

Nearly 300 GitHub repos pose as legit software to push malware

…New CrashStealer malware poses as Apple crash reporting tool Critical SimpleHelp flaw exploited to deploy new stealer malware Steam Workshop abused to spread malware via Wallpaper Engine app New Shai-Hulud malware…

Jul 14, 2026 · Bill Toulas

Followed topics

Shai-Hulud