AWS Responds to npm Supply Chain Threat Campaigns

First seen 15 Dec 2025, 22:50 UTC • •24

Article Content

1 / 2

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

AWS incident response teams have been actively addressing high-profile software supply chain threats targeting third-party software repositories. These campaigns have affected organizations across various sectors, emphasizing the need for robust software supply chain protection. AWS has shared insights on their response strategies and lessons learned from these incidents.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 241d ago How this analysis works

Threat Graph

7 entities, 5 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Supply Chain Attack
Worm

Campaign (1)

Nx Package Compromise

Malware (2)

Shai-Hulud 2
Shai-hulud

Affected Platform (1)

GitHub

Tool (1)

Relationships

Nx Package Compromise uses Shai-Hulud 2
Nx Package Compromise uses Shai-hulud
Supply Chain Attack targets GitHub
Worm targets GitHub
Nx Package Compromise related to Npm

Following this threat?

Track Shai-Hulud 2 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

AWS Responds to npm Supply Chain Threat Campaigns

Article Content

More articles in this cluster (1)

Threat Graph

Following this threat?

Extracted Entities (7)

Attack Types (2)

Campaigns (1)

Malware (2)

Platforms (1)

Tools (1)