[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnaslfWS1N1cHObmPUGrcl_5PE_gVpJd7oOjFS8awEys":3},{"article":4,"iocs":54,"watch_terms":64,"solutions":65,"lesson":156},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":33,"category":34,"article_tags":38},"b0cdc22d-65a4-4a05-9716-c78cb04f2def","New Shai-Hulud malware wave compromises 600 npm packages","new-shai-hulud-malware-wave-compromises-600-npm-packages-629679","Threat actors earlier today published more than 600 malicious packages to the Node Package Manager (npm) index as part of a new Shai-Hulud supply-chain campaign. [...]","Threat actors published 639 malicious versions across 323 unique packages to npm on May 19, 2026, primarily targeting the @antv ecosystem (charting and visualization libraries). The malware steals GitHub, npm, cloud, Kubernetes, and CI\u002FCD credentials, exfiltrating them via Session P2P network and GitHub repositories to evade detection. This is part of an ongoing Shai-Hulud campaign that began in September 2025 and now includes capabilities to forge valid Sigstore provenance attestations and establish persistence via VS Code and Claude Code configuration.","Shai-Hulud campaign injects malware into 600+ npm packages to steal developer credentials.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fnew-shai-hulud-malware-wave-compromises-600-npm-packages\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F05\u002F19\u002Fbox.jpg","2026-05-19T14:30:22+00:00","2026-05-19T16:00:07.561226+00:00",9,[17,20,23,26,29,31],{"name":18,"type":19},"Shai-Hulud","campaign",{"name":21,"type":22},"TeamPCP","threat_actor",{"name":24,"type":25},"npm","technology",{"name":27,"type":28},"@antv\u002Fg2","product",{"name":30,"type":28},"echarts-for-react",{"name":32,"type":25},"Sigstore","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":33,"icon":35,"name":36,"slug":37},null,"Supply Chain","supply-chain",[39,44,49],{"category":40},{"id":41,"icon":35,"name":42,"slug":43},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":45},{"id":46,"icon":35,"name":47,"slug":48},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":50},{"id":51,"icon":35,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55,59,62],{"type":56,"value":57,"context":58},"domain","filev2.getsession.org","Primary exfiltration endpoint used by Shai-Hulud malware via Session P2P network",{"type":56,"value":60,"context":61},"t.m-kosche.com","Secondary C2 endpoint for shipping stolen credentials",{"type":43,"value":18,"context":63},"Supply-chain malware campaign targeting npm, PyPI, and Composer ecosystems",[27,30],{"controls":66,"vendors":152},[67,96,125],{"slug":68,"name":69,"problem":70,"products":71},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[72,80,88],{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"slug":97,"name":98,"problem":99,"products":100},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[101,109,117],{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"vega","Vega","\u002Fvendor-logos\u002Fvega.png","vega-agentic-detection","Agentic Detection","https:\u002F\u002Fvega.io\u002Fplatform\u002Fagentic-detection","Detection rules that run across security data in the stores where it already lives, so logs do not have to be moved into a central SIEM first.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"abstract-security","Abstract Security","\u002Fvendor-logos\u002Fabstract-security.png","abstract-composable-siem","Abstract Composable SIEM","https:\u002F\u002Fwww.abstract.security\u002Fplatform","SIEM built from separate parts for collection, AI-assisted detection and tiered retention, which can be adopted one at a time.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-security-operations","Google Security Operations","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fsecurity-operations","Cloud SIEM and SOAR, formerly Chronicle.",{"slug":126,"name":127,"problem":128,"products":129},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[130,136,144],{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":131,"product_name":132,"url":134,"description":135},"socket","Socket","\u002Fvendor-logos\u002Fsocket.png","https:\u002F\u002Fsocket.dev\u002F","Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.",{"vendor_slug":137,"vendor_name":138,"vendor_logo":139,"product_slug":140,"product_name":141,"url":142,"description":143},"snyk","Snyk","\u002Fvendor-logos\u002Fsnyk.png","snyk-open-source","Snyk Open Source","https:\u002F\u002Fsnyk.io\u002Fproduct\u002Fopen-source-security-management\u002F","Finds and fixes vulnerable open-source dependencies in code and pipelines.",{"vendor_slug":145,"vendor_name":146,"vendor_logo":147,"product_slug":148,"product_name":149,"url":150,"description":151},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-curation","JFrog Curation","https:\u002F\u002Fjfrog.com\u002Fcuration\u002F","Blocks malicious and risky open-source packages before they enter your repositories.",[153],{"slug":131,"name":132,"logo_path":133,"roles":154},[155],"reported_by",{"slug":157,"title":158,"body":159,"framework_refs":160,"framework_notes":166},"massive-npm-package-poisoning-attack-compromises-developer-credentials","Massive npm Package Poisoning Attack Compromises Developer Credentials","The Shai-Hulud malware campaign successfully compromised 639 malicious npm package versions by exploiting trust in the package ecosystem, particularly targeting popular visualization libraries in the @antv ecosystem. The attackers demonstrated sophisticated techniques including credential theft across multiple platforms (GitHub, npm, cloud services, Kubernetes, CI\u002FCD), evasion through P2P networks, and even forging Sigstore provenance attestations to appear legitimate. This attack highlights the critical vulnerability in software supply chains where developers automatically trust and install packages, making it essential for organizations to implement rigorous package validation and monitoring processes.",[161,162,163,164,165],"CIS Control 2.1","NIST SP 800-161","NIST SSDF","CIS Control 11.2","OWASP SCVS",{"NIST SSDF":167,"OWASP SCVS":168,"CIS Control 2.1":169,"NIST SP 800-161":170,"CIS Control 11.2":171},"The SSDF calls for verifying third-party components and protecting build credentials, the targets of Shai-Hulud.","Software component verification standards help organisations check package integrity and provenance, though forged Sigstore attestations show provenance alone is not enough.","A detailed software inventory, including npm dependencies, lets teams quickly find projects pulling any of the 639 poisoned package versions.","Supply chain risk management treats npm packages as supplier inputs that need vetting, not blind trust.","Automated backups let teams restore clean build systems and repositories after credential-stealing malware compromises them."]