Shai-hulud

Jade Sleet Targets Indian IT Firm with FLATROOF and ROOFDECK Backdoors

Vulnerability Exploitation Surpasses Credential Theft as Leading Cyber Breach Vector

Microsoft Disrupts Fox Tempest Malware-Signing Service for Ransomware Gangs

Megalodon Campaign Infects Over 5,500 GitHub Repositories with Malware

EvilTokens Phishing Kit Exploits Microsoft 365 with AI-Driven BEC Tactics

Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages

TeamPCP Hackers Arrested for Major Supply Chain Attacks

Shai-Hulud npm Payload Resurfaces After 111 Days Dormancy

GitHub Breach: 3,800 Internal Repositories Compromised via Malicious VS Code Extension

Google's Undercover Analyst Disrupts TeamPCP Supply Chain Hacking

RubyGems Implements Dependency Cooldowns to Combat Supply Chain Attacks

Spring Ring: Coordinated Vishing Campaign Exploits Microsoft Teams

Suno AI Music Startup Hacked, Exposing Massive Data Scraping Practices

Kubernetes Cluster Compromised via Leaked AWS Credentials

AI Data Leaks Expose Sensitive Information Across Major Platforms

Version Control Systems Targeted in Supply Chain Attacks

Ransomware Fuels Surge in Global Cyberattacks

Shai Hulud npm Worm Compromises Over 26,000 Repositories

GitHub to Disable Automatic npm Script Execution to Combat Supply Chain Attacks

OpenAI Faces Supply Chain Attack via TanStack npm Library

RubyGems Suspends New Signups Following Malicious Package Attack

AI-BOMs Introduced to Combat Shadow AI Threats in Enterprises

Jqwik Developer Embeds Bot-Targeted Code Deletion in Testing Framework

New CVE Lite CLI Tool Audits AI Security Overrides for JavaScript Dependencies

GitHub and PyPI Implement Time-Based Defenses Against Supply-Chain Attacks

Open Source Registries Face Financial Crisis Impacting Security Features

Malicious Browser Extensions Infect 4.3M Users with Spyware

Cybercriminals Exploit Supply Chain Attacks in Self-Reinforcing Ecosystem

GitLab 2FA Bypass Vulnerability Patched

Shai-Hulud 2.0 Worm Affects Over One-Third of Fortune 100

Domain Resurrection Attacks Target Linux Users via Snap Store

Shai-Hulud Malware Compromises 25K GitHub Repositories via npm Packages

OpenAI Codex CLI Vulnerability Enables Command Injection Attacks

New Shai Hulud Malware Variant Compromises Developer Environments

Shai-Hulud Malware Infects npm Packages, Compromising Thousands of Repositories

IndonesianFoods Worm Floods npm with Over 100,000 Spam Packages

Exposed GitHub PATs Enable Cloud Environment Breaches

Malicious npm Packages Use Adspect Cloaking in Crypto Scam

Tenable Reports AI and Cloud Security Risks Outpacing Governance

Phishing Campaign Utilizes Malicious npm Packages Targeting Various Sectors

Version Control DFIR: GitHub, GitLab, Bitbucket, and Azure DevOps Detection & Incident ...

Shai-Hulud hackers: two men charged over TeamPCP’s global supply chain crime spree that hit OpenAI, and thousands more

How AI Coding Agents Can Accidentally Leak Your Secrets

Keyv And Cacheable Compromise

GitHub, PyPI add time

LevelBlue found that phishing started 65% of intrusions

Suno Hack Ai Music Data Scraping

Suno scraped YouTube, Deezer to train its AI, hacked code reveals

Suno's Hacked Source Code Confirms YouTube Stream-Ripping: Users Were Never Warned

Suno Leak: AI Models Apparently Trained with Music from YouTube and Deezer

Suno hack reveals scraped YouTube, Deezer, podcast training audio

This open source tool tracks the AI security advice it gave you that's no longer worth anything

AI is code – and can't be prompted into being smarter

GitHub pulls pin on npm's auto-run scripts

GitHub pulls pin on npm's auto

Miasma Supply Chain Worm Burrows Into 73 Microsoft Repositories

New PyPI Wave in Mini Shai-Hulud, Miasma, and Hades Campaign

Shai-Hulud "Hades" Wave Hits Six PyPI Bioinformatics Packages via Stolen Tokens

Christian Schneider

Risky Bulletin: RubyGems adds dependency cooldowns to counter supply chain attacks

Feeding Frenzy: 'Megalodon' Malware Infects Thousands of GitHub Repos

TrapDoor Attack Targets CLAUDE.md and .cursorrules With Zero

GitHub Confirms Breach, 4K Internal Repos Stolen

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply ...

GitHub confirms breach after hackers put stolen source code up for sale

Leaked Kubernetes Secrets: Impact Assessment and Mitigation Strategies

Verizon DBIR finds vulnerability exploitation overtakes stolen credentials as top breach entry ...

GitHub says internal repos exfiltrated after poisoned VS Code extension attack

GitHub Investigates TeamPCP Claimed Breach of 4,000 Repositories

Microsoft takes down MSaaS used by ransomware gangs

TeamPCP releases 'vibe coded' Shai-Hulud source code, issues challenge

Cisco, Canvas, Microsoft, Exchange 0-Days, NPM Backdoors, GPT-5.5 and more… – SWN #581

Shai-Hulud goes open-source

OpenAI Confirms Security Breach Linked to AI Malware Campaign

OpenAI Confirms Security Breach Linked to AI Malware Campaign

Trusted by default: The npm attack pattern security teams miss | perspective

Hackers Insert Malware Into Mistral AI Software Download

Malware crew TeamPCP open-sources its Shai

RubyGems disables sign-ups after attack on staff

Mistral AI and TanStack hit in supply chain attack with SLSA-attested malware

Official CheckMarx Jenkins package compromised with infostealer

Checkmarx tackles another TeamPCP intrusion as Jenkins plugin sabotaged

Checkmarx tackles another TeamPCP intrusion as Jenkins plugin sabotaged