dlvr.it May 01
The never-ending supply chain attacks worm into SAP npm packages, other dev tools
theregister.com/2026/04/30/supply_chain_attacks_sap_npm_packages/
Story Details
| Last Updated | |
| Total Articles | 1 |
Main Topics
Similar to This
Previous
dlvr.it Oct 08
Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise: Credential-stealing malware detected within minutes of npm release ...
theregister.com/security/2026/10/08/shai-hulud-worm-makes-jump-to-ai-infrastructure-with-tensorlake-compromise/5302054
The New Stack Sep 09
Shai-Hulud: Whoever controls your package registry controls your pipeline: Learn how the Shai-Hulud worm targets package registries and how to protect your ...
thenewstack.io/shai-hulud-pipeline-security/
The New Stack Aug 31
Shai-Hulud: Whoever controls your package registry controls your pipeline: Learn how the Shai-Hulud worm targets package registries and how to protect your ...
thenewstack.io/shai-hulud-pipeline-security/
dlvr.it Aug 15
ChainDrop worm crawls into npm supply chain, evades standard defenses: Shai-Hulud variant poisons 444 packages, spreads via tarballs and dev-tool hooks
theregister.com/security/2026/08/15/chaindrop-worm-crawls-into-npm-supply-chain-evades-standard-defenses/5287958
CyberNews Aug 05
Massive NPM supply chain attack is yet again ravaging hundreds of software packages
cybernews.com/security/npm-supply-chain-attack-shai-hulud-worm/
npm supply chain: valid certificates, stolen accounts: Stolen credentials produced valid Sigstore certificates, clearing 633 malicious npm packages — one of ...
venturebeat.com/security/npm-sigstore-provenance-stolen-identity-audit-grid-2026
dlvr.it May 19
Shai-Hulud keeps burrowing: 314 npm packages infected after another account compromise
theregister.com/cyber-crime/2026/05/19/shai-hulud-keeps-burrowing-314-npm-packages-infected-after-another-account-compromise/5242601
dlvr.it May 19
Shai-Hulud copycat hits another npm package: Plus three other stealers in three other packages, all from the same scumbag
theregister.com/cyber-crime/2026/05/18/shai-hulud-copycat-hits-another-npm-package/5242180
securityaffairs.com May 19
Shai-Hulud worm copycats emerge after source code leak: Shai-Hulud worm copycats are already attacking NPM developers after its source code leaked ...
securityaffairs.com/192366/malware/shai-hulud-worm-copycats-emerge-after-source-code-leak.html
Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps
venturebeat.com/security/shai-hulud-worm-172-npm-pypi-packages-valid-provenance-ci-cd-audit
Bitwarden CLI npm package compromised to steal developer credentials: The Bitwarden CLI was briefly compromised after attackers uploaded a malicious ...
bleepingcomputer.com/news/security/bitwarden-cli-npm-package-compromised-to-steal-developer-credentials/
dlvr.it Apr 23
Another npm supply chain worm is tearing through dev environments: : Plus, the payload references 'TeamPCP/LiteLLM method'
theregister.com/2026/04/22/another_npm_supply_chain_attack/
Shai-Hulud 2.0 NPM malware attack exposed up to 400,000 dev secrets: The second Shai-Hulud attack last week exposed around 400,000 raw secrets after infecting ...
bleepingcomputer.com/news/security/shai-hulud-20-npm-malware-attack-exposed-up-to-400-000-dev-secrets/
New NPM supply-chain attack compromises major ENS and crypto libraries: A researcher reported that more than 400 NPM libraries, including a cluster of ENS-linked ...
cointelegraph.com/news/new-npm-supply-chain-attack-compromises-major-ens-and-crypto-libraries
Over 300 npm packages compromised by self-replicating worm: A new piece of malware is spreading through the popular tinycolor NPM library and more than 300 other ...
neowin.net/news/over-300-npm-packages-compromised-by-self-replicating-worm/
dlvr.it Aug 27 25
Nx NPM packages poisoned in AI-assisted supply chain attack: : Stolen dev credentials posted to GitHub as attackers abuse CLI tools for recon
theregister.com/2025/08/27/nx_npm_supply_chain_attack/
Next