Related Threat Clusters

NWHStealer Malware Campaign Evolves with Bun Loader and Anti-VM Techniques
The NWHStealer infostealer has adopted a new distribution method utilizing the Bun JavaScript runtime, enhancing its delivery infrastructure. This Rust-based malware targets Windows systems, leveraging Bun's performance…

2 articles · Updated May 8, 2026
GitHub Breach: 3,800 Internal Repositories Compromised via Malicious VS Code Extension
On May 20, 2026, GitHub confirmed a significant security breach involving a poisoned Visual Studio Code (VS Code) extension that compromised an employee's device. The attack, attributed to the TeamPCP hacking group,…

149 articles · Updated May 20, 2026

Recent Intelligence Reports

Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack — unsafe.sh · June 7, 2026
New NWHStealer Delivery Chain Uses Bun Loader, Anti-VM Checks, and Encrypted C2 — Cybersecuritynews · May 8, 2026
NWHStealer Campaign Deploys Bun Loader, Anti-VM Evasion, and Encrypted C2 — Gbhackers · May 8, 2026

TeamPCP Malware Supply Chain Attack Worm NWHStealer Campaign Azure Cursor Microsoft Miasma Mini Shai-Hulud Worm NWHStealer T1071 - Application Layer Protocol