Related Threat Clusters

North Korean Malware Targets Crypto Developers via NPM Packages
A malicious npm package named @validate-sdk/v2, introduced through Anthropic’s Claude Opus AI model, has been linked to a breach in the open-source crypto trading project openpaw-graveyard. This malware, dubbed…

6 articles · Updated May 1, 2026
Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages
A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…

737 articles · Updated April 29, 2026

Recent Intelligence Reports

AI Coding Agents Skip Package Verification, and Attackers Are Exploiting It — Techtimes · July 1, 2026
Crypto trading tools under threat from Claude malware — Cryptopolitan · May 1, 2026
A North Korean hacking group implanted malicious code generated by Claude into the ... — Panewslab · May 1, 2026
Malicious npm Dependency Linked to AI Assisted Commit Targets Crypto Wallets — Infosecurity-Magazine · April 29, 2026

Apt37 FAMOUS CHOLLIMA Reaper Malware Supply Chain Attack CISA Five Eyes NSa OpenVSX Phoenix Security ReversingLabs North Korea