Tag: Worm
-
ChainDrop Worm Hits 400+ npm Packages with Two Billion Monthly Installs
Security researchers have warned of a major new Shai-Hulud-based campaign which has already compromised more than 430 packages with a …
-
Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages
Shai-Hulud npm worm spreads through Keyv and hundreds of packages with 2 billion monthly downloads, stealing npm, GitHub, cloud and CI …
-
Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack
Microsoft’s GitHub repositories have become the latest to fall victim to the ongoing Miasma self-replicating supply chain attack campaign. …
-
Open-Weight LLM Enables Autonomous AI Worm
Researchers at the University of Toronto’s CleverHans Lab have developed a self-replicating AI worm powered by an open-weight LLM, …
-
Attackers Hijack Red Hat npm Scope to Steal Cloud Secrets
Red Hat’s official npm namespace has been hijacked to push backdoored package versions built to steal cloud and developer credentials, in a …
-
GitHub Trusted Publishing Bypassed In Red Hat npm Attack
More than 30 Red Hat npm packages were compromised after attackers hijacked a developer account to bypass GitHub’s trusted publishing …
-
Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm
A new Mini Shai-Hulud supply chain attack campaign, codenamed Miasma, has compromised @redhat-cloud-services packages to steal credentials …
-
Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm
Aikido Security says more than 30 official @redhat-cloud-services npm packages were compromised with a credential-stealing worm called …
-
TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages
A hacking group known as TeamPCP launched a massive coordinated supply chain attack using a self-propagating worm. On 11 May 2026, the …
-
Worm rubs out competitor’s malware, then takes control
There’s a mysterious framework worming its way through exposed cloud instances removing all traces of TeamPCP infections, but it’s not …
-
Shai-Hulud-Like Worm Targets Developers via npm and AI Tools
A supply chain worm resembling earlier Shai-Hulud malware has been discovered spreading through malicious npm packages. According to …
-
New Shai-Hulud Worm Spells Trouble For npm Users
Security experts have warned of a major new secret-stealing worm roaming the npm ecosystem which could affect millions of downstream users. …
●●●