Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Shai-Hulud npm Supply Chain Attack: Why SBOMs Fail and How to Detect Self-Propagating Package Worms
Introduction The Shai-Hulud npm supply chain campaign is a watershed moment for software supply chain defense, and not for the reasons most ...
Lunex Stealer + Shai-Hulud npm Supply Chain: BYOVD Credential Theft & Native Addon Camouflage — Enterprise Detection Pack
Lunex Stealer + Shai-Hulud npm Supply Chain: BYOVD Credential Theft & Native Addon Camouflage — Enterprise Detection Pack Classification: TL...
Shai-Hulud ChainDrop npm Worm + AWS Bedrock Token-Jacking: OTX Pulse Analysis — Credential Theft Detection Pack
Shai-Hulud ChainDrop npm Worm + AWS Bedrock Token-Jacking: OTX Pulse Analysis Two fresh OTX pulses paint a converging picture: credentials a...
FortiBleed FortiGate Credential Harvesting + Shai-Hulud npm Worm & AWS Bedrock Key-Jacking: OTX Detection Pack
Threat Summary Four concurrent OTX pulses published on 2026-10-07/08 reveal a maturing, multi-front credential-theft ecosystem in which stol...
Shai-Hulud Worm Compromises tensorlake npm SDK (v0.5.144) — Detection and Remediation Guide for Credential-Theft Supply Chain Attacks
A Weaponized npm Package Just Landed in Developer Toolchains — Again Security researchers at Socket have confirmed that version 0.5.144 of t...
Mini Shai-Hulud Resurgence: Compromised actions-cool GitHub Actions Re-Activated — Detection and Remediation Guide
Compromised GitHub Actions Resumed Executing Mini Shai-Hulud — What Defenders Must Do Now The Mini Shai-Hulud supply-chain campaign is not o...
Shai-Hulud Infostealer Now Scans 469 Credential Locations: Detection and Remediation Guide for Dev and CI/CD
Shai-Hulud Infostealer Now Scans 469 Credential Locations: Detection and Remediation Guide for Dev and CI/CD In early August, GitGuardian re...
The Gentlemen's EtherRAT & Shai-Hulud npm Supply Chain: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Intelligence indicates two concurrent high-severity campaigns targeting enterprise environments. The Gentlemen ransomware aff...
Supply Chain & Blockchain C2: Shai-Hulud, SmartLoader, and EtherRAT Campaigns — OTX Analysis
Intelligence Briefing Date: 2026-08-05 Source: AlienVault OTX Live Pulse Data Category: Infostealer & Credential Theft Campaigns Threat Summ...