Related Threat Clusters
-
TeamPCP Compromises Microsoft DurableTask and GitHub Actions in Supply Chain Attack
The TeamPCP threat group has expanded its supply chain attack campaign, compromising the Microsoft DurableTask Python client with versions v1.4.1, v1.4.2, and v1.4.3 found to contain a credential-stealing worm. This…
11 articles · Updated May 20, 2026 -
Glassworm Botnet Targeting Developers Disrupted by CrowdStrike and Google
The Glassworm botnet, which has targeted software developers since early 2025, was taken down in a coordinated operation by CrowdStrike, Google, and the Shadowserver Foundation on May 26, 2026. This botnet utilized…
30 articles · Updated May 27, 2026 -
Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages
A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…
751 articles · Updated April 29, 2026 -
Shai Hulud npm Worm Compromises Over 26,000 Repositories
The Shai Hulud worm has compromised more than 26,000 public repositories in a supply chain attack. The attack targeted various npm packages, exploiting vulnerabilities that allowed unauthorized access to these…
32 articles · Updated November 24, 2025 -
Shai Hulud Malware Exploits NPM Supply Chain Vulnerabilities
The Shai Hulud malware has been identified as a significant threat in NPM supply chain attacks, turning developers into unwitting distributors of malicious code. This malware typically executes during npm install…
3 articles · Updated December 23, 2025 -
Shai Hulud 3.0 Variant Discovered as Supply Chain Threat
Aikido Security has identified a third variant of Shai Hulud, which poses risks to the security of the open source supply chain. This discovery follows previous variants and highlights ongoing vulnerabilities in…
1 article · Updated December 31, 2025 -
389% Increase in Account Breaches Driven by Phishing Services in 2025
eSentire reported a significant rise in account compromises in 2025, with email-led intrusions linked to credential theft. The research, based on data from over 2,000 customers, indicated that account compromise…
4 articles · Updated January 16, 2026 -
New Variant of Shai Hulud Malware Discovered with Enhanced Obfuscation Techniques
Researchers have identified a modified variant of the Shai Hulud malware that has been embedded in npm packages. This new strain shows significant changes from the original version, indicating that threat actors are…
2 articles · Updated January 2, 2026 -
GlassWorm Malware Resurfaces in Open VSX Extensions Following Token Leak
The Open VSX registry faced a supply chain attack after access tokens were leaked, allowing threat actors to publish malicious extensions. The GlassWorm malware campaign has returned with new extensions targeting…
15 articles · Updated November 11, 2025 -
New Shai Hulud Malware Variant Compromises Developer Environments
The Shai Hulud malware has evolved, with a new variant impacting over 25,000 repositories and hundreds of npm packages. This malware campaign automates attacks on developer environments, affecting a significant number…
7 articles · Updated December 30, 2025
Recent Intelligence Reports
- New IronWorm malware hits 36 packages in npm supply — Bleepingcomputer · June 4, 2026
- Glassworm First Self Propagating Worm Using Invisible Code Hits Openvsx Marketplace — www.koi.ai · May 27, 2026
- CrowdStrike, Google shatter Glassworm botnet — Theregister · May 27, 2026
- Microsoft's durabletask package on PyPi Compromised. Mini Shai Hulud attacks again... again! — Aikido.Dev · May 19, 2026
- Phishing services drive 389% surge in account breaches — Securitybrief.Co.Nz · January 16, 2026
- Phishing services drive 389% surge in account breaches — Securitybrief.Au · January 16, 2026
- Nearly $8.5M pilfered from Trust Wallet in Shai Hulud malware attack — Scworld · January 2, 2026
- Threat Actors Testing Modified and Highly Obfuscated Version of Shai Hulud Strain — Cybersecuritynews · January 2, 2026