dlvr.it Apr 23
Another npm supply chain worm is tearing through dev environments:
: Plus, the payload references 'TeamPCP/LiteLLM method'
theregister.com/2026/04/22/another_npm_supply_chain_attack/
Story Details
| Last Updated | |
| Total Articles | 1 |
Main Topics
standalone malware computer program that replicates itself in order to spread to other computers
Similar to This
Previous
dlvr.it Oct 08
Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise: Credential-stealing malware detected within minutes of npm release ...
theregister.com/security/2026/10/08/shai-hulud-worm-makes-jump-to-ai-infrastructure-with-tensorlake-compromise/5302054
The New Stack Aug 31
Shai-Hulud: Whoever controls your package registry controls your pipeline: Learn how the Shai-Hulud worm targets package registries and how to protect your ...
thenewstack.io/shai-hulud-pipeline-security/
Australia arrests alleged TeamPCP hackers behind supply-chain attacks: Australian authorities have arrested and charged two young men accused of belonging to ...
bleepingcomputer.com/news/security/australia-arrests-alleged-teampcp-hackers-behind-supply-chain-attacks/
dlvr.it Aug 28
Australian cops cuff alleged TeamPCP masterminds: Alleged crew behind the Shai-Hulud worm and other supply chain attacks nabbed with help from the FBI
theregister.com/security/2026/08/28/australian-cops-cuff-alleged-teampcp-masterminds/5293157
dlvr.it May 19
Shai-Hulud copycat hits another npm package: Plus three other stealers in three other packages, all from the same scumbag
theregister.com/cyber-crime/2026/05/18/shai-hulud-copycat-hits-another-npm-package/5242180
securityaffairs.com May 19
Shai-Hulud worm copycats emerge after source code leak: Shai-Hulud worm copycats are already attacking NPM developers after its source code leaked ...
securityaffairs.com/192366/malware/shai-hulud-worm-copycats-emerge-after-source-code-leak.html
Popular node-ipc npm package compromised to steal credentials: Hackers have injected credential-stealing malware into newly published versions of node-ipc ...
bleepingcomputer.com/news/security/popular-node-ipc-npm-package-compromised-to-steal-credentials/
Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps
venturebeat.com/security/shai-hulud-worm-172-npm-pypi-packages-valid-provenance-ci-cd-audit
dlvr.it May 01
The never-ending supply chain attacks worm into SAP npm packages, other dev tools
theregister.com/2026/04/30/supply_chain_attacks_sap_npm_packages/
Bitwarden CLI npm package compromised to steal developer credentials: The Bitwarden CLI was briefly compromised after attackers uploaded a malicious ...
bleepingcomputer.com/news/security/bitwarden-cli-npm-package-compromised-to-steal-developer-credentials/
dlvr.it Apr 02
AI recruiting biz Mercor says it was 'one of thousands' hit in LiteLLM supply-chain attack
theregister.com/2026/04/02/mercor_supply_chain_attack/
North Korean hackers implicated in major supply chain attack: Hackers briefly turned a widely trusted developer tool into a vehicle for malware.
axios.com/2026/03/31/north-korean-hackers-implicated-in-major-supply-chain-attack
Extortion expected: Hackers want to monetize massive supply chain attack - | Golem.de
golem.de/news/erpressungen-erwartet-hacker-wollen-riesige-supply-chain-attacke-zu-geld-machen-2603-206984.html
Shai-Hulud 2.0 NPM malware attack exposed up to 400,000 dev secrets: The second Shai-Hulud attack last week exposed around 400,000 raw secrets after infecting ...
bleepingcomputer.com/news/security/shai-hulud-20-npm-malware-attack-exposed-up-to-400-000-dev-secrets/
Over 300 npm packages compromised by self-replicating worm: A new piece of malware is spreading through the popular tinycolor NPM library and more than 300 other ...
neowin.net/news/over-300-npm-packages-compromised-by-self-replicating-worm/
dlvr.it Aug 27 25
Nx NPM packages poisoned in AI-assisted supply chain attack: : Stolen dev credentials posted to GitHub as attackers abuse CLI tools for recon
theregister.com/2025/08/27/nx_npm_supply_chain_attack/
Supply-chain attacks on open source software are getting out of hand: Attacks affected packages, including one with ~2.8 million weekly downloads.
arstechnica.com/security/2025/07/open-source-repositories-are-seeing-a-rash-of-supply-chain-attacks/
Next