[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcbyILCr9TFDEYYfu40dhZrxLIo_5y9Bie8ZqoFHWxlI":3},{"article":4,"iocs":54,"watch_terms":64,"solutions":65,"lesson":151},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":33,"category":34,"article_tags":38},"51329577-fd31-4851-9827-34f6f1c2a937","Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music Scraping","suno-breached-via-shai-hulud-worm-leaked-code-exposes-ai-music-scraping-ca929f","Leaked source code shows how AI music generator Suno scraped YouTube, Deezer, and Genius to train its models. The breach that exposed it started with a Shai-Hulud infection, according to a scoop from 404 Media. A threat actor using the handle ellie.191 told 404 Media they breached Suno by compromising a single employee with the Shai-Hulud worm, then used the harvested GitHub and cloud credentials to reach the company's source code, customer list, and Stripe payment data. The downstream impact of Shai-Hulud is still coming to light months after the worm's first waves. The campaign exposed secrets from tens of thousands of GitHub repositories, and the Suno breach is the latest to surface. The leaked code documents Suno's scraping # The leaked source code and dataset comments describe scraping from YouTube Music, Deezer, Genius, Pond5, Jamendo, Freesound, and the International Music Score Library Project, plus roughly a million hours of podcasts identified through PodcastIndex. The code confirms the RIAA's claim that Suno stream-ripped tracks from YouTube and shows Suno routing that scraping through proxies from Bright Data. 404 Media published the dataset figures and file-level detail. # Shai-Hulud harvests GitHub and cloud service credentials from developer machines and CI environments, so compromising one employee was enough to reach Suno's internal systems. It exfiltrates what it steals to a public GitHub repository under the victim's own account, which leaves the credentials publicly accessible. What 404 Media does not establish is ellie.191's role. They may have been part of the campaign that planted the trojanized packages, or they may have found the Suno employee's exfiltrated credentials in that public repository and used them to gain unauthorized access to the company's code and systems. The second fits how the hacker described themselves, with no specific reason for targeting Suno and a stated habit of hacking \"anything and everything.\" Either way, the worm turned a single infected developer machine into a public dump of Suno's corporate credentials. ellie.191 gave 404 Media a sample of customer records, and some of those customers confirmed the data was theirs and said Suno never notified them of a breach. Suno confirmed a security incident in a statement to 404 Media, dating it to November 2025 and describing it as limited and quickly contained. The company said the incident primarily involved outdated source code and that it does not store full credit card numbers in Stripe. The reported November timing lines up with Shai-Hulud's second wave, which spread across npm in late November and added a destructive fallback that wipes home directories when it can't exfiltrate. Shai-Hulud spreads by republishing malicious versions of any packages the stolen npm and GitHub accounts can reach. The first wave compromised dozens of packages in September 2025 and reached CrowdStrike's packages within weeks. SANDWORM_MODE added AI toolchain poisoning in February 2026. Another variant, Mini Shai-Hulud, hit npm, PyPI, and Packagist in April and May 2026.","AI music generator Suno was breached in November 2025 after a developer was infected with the Shai-Hulud worm, which harvested GitHub and cloud credentials. The leaked source code reveals Suno scraped music from YouTube, Deezer, Genius, and other platforms to train its models, confirming RIAA allegations. The breach exposed customer records and Stripe payment data; Shai-Hulud has since evolved into multiple variants affecting thousands of open-source repositories.","Suno AI music generator breached via Shai-Hulud worm; leaked code exposes YouTube\u002FDeezer scraping.","https:\u002F\u002Fsocket.dev\u002Fblog\u002Fsuno-breach-shai-hulud-worm?utm_medium=feed","https:\u002F\u002Fcdn.sanity.io\u002Fimages\u002Fcgdhsj6q\u002Fproduction\u002Fc14aefc9c03ae82b9367e7aa7c9bc5c09f1bf1a8-1672x941.png?w=1000&q=95&fit=max&auto=format","2026-07-16T15:34:49.523+00:00","2026-07-16T18:00:26.063813+00:00",9,[17,20,23,25,28,30],{"name":18,"type":19},"Suno","product",{"name":21,"type":22},"Vercel","vendor",{"name":24,"type":22},"CrowdStrike",{"name":26,"type":27},"npm","technology",{"name":29,"type":27},"GitHub",{"name":31,"type":32},"ellie.191","threat_actor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":33,"icon":35,"name":36,"slug":37},null,"Breaches","breaches",[39,44,49],{"category":40},{"id":41,"icon":35,"name":42,"slug":43},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":45},{"id":46,"icon":35,"name":47,"slug":48},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":50},{"id":51,"icon":35,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55,58,61],{"type":48,"value":56,"context":57},"Shai-Hulud","Worm targeting developer machines and CI environments; harvests GitHub and cloud credentials; spreads via trojanized npm packages",{"type":48,"value":59,"context":60},"SANDWORM_MODE","Variant of Shai-Hulud with AI toolchain poisoning capabilities, deployed February 2026",{"type":48,"value":62,"context":63},"Mini Shai-Hulud","Variant hitting npm, PyPI, and Packagist in April and May 2026",[24,21,18],{"controls":66,"vendors":150},[67,95,124],{"slug":68,"name":69,"problem":70,"products":71},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[72,80,87],{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":81,"vendor_name":29,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"github","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"slug":96,"name":97,"problem":98,"products":99},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[100,108,116],{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"slug":125,"name":126,"problem":127,"products":128},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[129,137,142],{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":138,"product_name":139,"url":140,"description":141},"luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":143,"vendor_name":144,"vendor_logo":145,"product_slug":146,"product_name":147,"url":148,"description":149},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",[],{"slug":152,"title":153,"body":154,"framework_refs":155,"framework_notes":171},"suno-ai-breach-developer-credential-theft-exposes-training-data-scraping","Suno AI Breach: Developer Credential Theft Exposes Training Data Scraping","The Suno breach originated when a developer was infected by the Shai-Hulud worm, which harvested GitHub and cloud credentials — a classic case of inadequate endpoint security and credential hygiene enabling a full organizational compromise. Once credentials were stolen, attackers gained access to source code repositories and customer data, demonstrating how a single developer's infected machine can become an entry point to an entire platform. The leaked code further revealed undisclosed scraping of copyrighted music from major platforms, compounding legal liability on top of the security failure. This matters because developer workstations are high-value targets: they hold privileged credentials, access to source code, and pathways into CI\u002FCD pipelines and cloud environments. Organizations that fail to treat developer endpoints as critical assets — and fail to enforce secrets management — expose themselves to cascading technical and regulatory consequences.",[156,157,158,159,160,161,162,163,164,165,166,167,168,169,170],"CIS Control 4 – Secure Configuration of Enterprise Assets and Software","CIS Control 5 – Account Management","CIS Control 6 – Access Control Management","CIS Control 10 – Malware Defenses","CIS Control 14 – Security Awareness and Skills Training","NIST SP 800-53 AC-2 (Account Management)","NIST SP 800-53 IA-5 (Authenticator Management)","NIST SP 800-53 SI-3 (Malicious Code Protection)","NIST SP 800-53 SA-12 (Supply Chain Protection)","NIST CSF ID.AM-2 (Software platforms and applications inventoried)","NIST CSF PR.AC-1 (Identities and credentials managed)","GDPR Article 32 (Security of Processing)","GDPR Article 33 (Notification of a Personal Data Breach)","PCI DSS Requirement 8 (Identify Users and Authenticate Access to System Components)","ITIL Service Security Management – Incident and Access Control Practices",{}]