Vlt — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
January 27, 2026
Last Seen
January 28, 2026

Vlt is a technology platform tracked by ThreatCluster, appearing in 2 threat clusters built from 3 intelligence report mentions.

Vlt is a technology platform tracked across 2 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed January 27, 2026; most recent activity January 28, 2026.

Related Threat Clusters

  • Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages

    A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…

    700 articles · Updated April 29, 2026
  • PackageGate Vulnerabilities Affect Major JavaScript Package Managers

    Koi researchers identified a set of vulnerabilities known as 'PackageGate' in NPM, PNPM, VLT, and Bun. These flaws allow attackers to bypass supply chain protections and execute malicious code, posing risks to users of…

    2 articles · Updated January 28, 2026

Recent Intelligence Reports

  • PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun — Securityaffairs · January 28, 2026
  • PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun — Securityaffairs.Co · January 28, 2026
  • Unplugged holes in the npm and yarn package managers could let attackers bypass defenses against Shai — Csoonline · January 27, 2026

Frequently asked questions

What is Vlt?

Vlt is a technology platform tracked by ThreatCluster, appearing in 2 threat clusters built from 3 intelligence report mentions.

Is Vlt still active?

The most recent intelligence report mentioning Vlt on ThreatCluster is dated January 28, 2026. Activity was first observed January 27, 2026, giving a tracked span from then to January 28, 2026.

What is Vlt associated with?

Across ThreatCluster reporting, Vlt most frequently co-occurs with Supply Chain Attack, Worm, Zero-day Exploit, Koi, CVE-2026-21509, among 12 tracked related entities.

What are the latest developments involving Vlt?

The most significant recent cluster is “Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages” (700 articles · Updated April 29, 2026). Vlt appears across 2 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on Vlt?

Vlt appears in 3 intelligence report mentions across 2 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown