Related Threat Clusters

Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages
A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…

737 articles · Updated April 29, 2026
Exploitation of GitHub Actions via pull_request_target Trigger
A targeted campaign exploiting GitHub Actions' pull_request_target trigger was identified, allowing attackers to execute malicious code with elevated privileges. This vulnerability has been documented since 2021 but…

2 articles · Updated May 11, 2026

Recent Intelligence Reports

AsyncAPI npm packages backdoored via GitHub Actions — Aikido.Dev · July 14, 2026
M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions — Wiz · July 14, 2026
AsyncAPI npm packages compromised with Miasma variant — Aikido.Dev · July 14, 2026
Csa Research Note Github Actions Prt Scan Supply Chain 2026 — labs.cloudsecurityalliance.org · May 11, 2026

Malware Supply Chain Attack AsyncAPI Azure Cloudflare Cloud Native Computing Foundation DataDog Ethereum Microsoft CWE-200 - Exposure of Sensitive Information CWE-798 - Use of Hard-coded Credentials CWE-94 - Code Injection