Skip to content
Threat Feed

Actor

Shai-Hulud

1 brief RSS
high threat

Shai-Hulud Campaign Returns Targeting npm Maintainer Accounts

The Shai-Hulud campaign is back and targets maintainer accounts to publish malicious code directly into the software supply chain via npm, recently hitting the Ant Design (AntV) ecosystem and potentially exposing downstream developers to credential theft and remote code execution.

npm Shai-Hulud supply-chain credential-theft remote-code-execution
1r 2t