Scworld

New Shai Hulud Malware Variant Compromises Developer Environments

First seen 30 Dec 2025, 20:34 UTC • Scworld

+1 •28.6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The Shai Hulud malware has evolved, with a new variant impacting over 25,000 repositories and hundreds of npm packages. This malware campaign automates attacks on developer environments, affecting a significant number of developers and their projects.

How this analysis works

Attack Flow

Continue Reading

TeamPCP Compromises Microsoft DurableTask and GitHub Actions in Supply Chain Attack Glassworm Botnet Targeting Developers Disrupted by CrowdStrike and Google Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages Shai Hulud npm Worm Compromises Over 26,000 Repositories Shai Hulud Malware Exploits NPM Supply Chain Vulnerabilities Shai Hulud 3.0 Variant Discovered as Supply Chain Threat

New Shai Hulud Malware Variant Compromises Developer Environments

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading