Gusano autopropagable infectó más de 400 paquetes npm y robó credenciales de desarrolladores

Ciberseguridadlatam •Redacción CSL • August 6, 2026

Un malware denominado Mini Shai-Hulud comprometió más de 400 paquetes npm de múltiples editores sin relación entre sí. El ataque combinó robo de credenciales con propagación automática a través del ecosistema de desarrollo de software. Qué pasó El gusano afectó paquetes ampliamente utilizados como keyv, flat-cache y cache-manager. El payload malicioso, basado en Bun y […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Over 400 npm Packages Infected by Credential-Stealing Worm A self-replicating worm, identified as a variant of Mini Shai-Hulud, has compromised over 400 npm packages from various unrelated publishers. The malware is designed to steal developer credentials and propagate itself by publishing malicious versions of the affected libraries. Notable packages impacted include keyv, flat-cache, and cache-manager. The worm exploits vulnerabilities in the npm ecosystem to facilitate its spread. Developers are urged to review their dependencies and take necessary precautions. The attack highlights significant risks within the software supply chain. No specific CVEs have been reported yet, but the scale of the infection raises alarms. 2 sources 66

Extracted Entities

Gusano autopropagable infectó más de 400 paquetes npm y robó credenciales de desarrolladores

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (2)

Tools (2)