Más de 400 paquetes npm comprometidos con gusano que roba credenciales y se autopropaga

Ciberseguridadlatam •Redacción CSL • August 6, 2026

Un gusano autorreplicante infectó más de 400 paquetes npm de múltiples editores sin relación entre sí. El malware, identificado como una variante de Mini Shai-Hulud, roba credenciales de desarrollo y se propaga automáticamente al publicar versiones maliciosas de las librerías comprometidas. Qué pasó Los paquetes afectados incluyen keyv, flat-cache y cache-manager. El ataque aprovecha el […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Over 400 npm Packages Infected by Credential-Stealing Worm A self-replicating worm, identified as a variant of Mini Shai-Hulud, has compromised over 400 npm packages from various unrelated publishers. The malware is designed to steal developer credentials and propagate itself by publishing malicious versions of the affected libraries. Notable packages impacted include keyv, flat-cache, and cache-manager. The worm exploits vulnerabilities in the npm ecosystem to facilitate its spread. Developers are urged to review their dependencies and take necessary precautions. The attack highlights significant risks within the software supply chain. No specific CVEs have been reported yet, but the scale of the infection raises alarms. 2 sources 66

Extracted Entities

Más de 400 paquetes npm comprometidos con gusano que roba credenciales y se autopropaga

The full story

Extracted Entities

Attack Types (2)

Malware (1)

MITRE ATT&CK (2)