{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","feed_url":"https://feed.craftedsignal.io/vendors/cacheable/feed.json","home_page_url":"https://feed.craftedsignal.io/","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["jscrambler 8.14.0","npm","AWS","Azure","Google Cloud","MetaMask","Phantom","Exodus","Bitwarden","Discord","Slack","Telegram","Steam","Claude Desktop","Cursor","Windsurf","VS Code","Zed","GitHub Actions","AsyncAPI Generator","@asyncapi/generator (3.3.1)","@asyncapi/generator-helpers (1.1.1)","@asyncapi/generator-components (0.7.1)","@asyncapi/specs (6.11.2)","@asyncapi/specs (6.11.2-alpha.1)","Chrome","Brave","Firefox","Edge","macOS Keychain","GitHub","npm packages","PyPI packages","RubyGems packages","JFrog Artifactory","GitLab","Docker","Kubernetes","Bun runtime","PowerShell","curl","wget","Node.js","Python","systemctl","kubectl","PyPI","Docker Hub","OpenVSX","keyv (6.0.0)","@cacheable/utils (2.5.1)","@hubsync/web-sdk-react (6.3.7)","@nebula.js/nucleus (0.5.1)","@ornikar/babel-preset-base (6.0.3)","@ornikar/babel-preset-kitt-universal (8.0.3)","@ornikar/babel-preset-react (6.1.4)","@ornikar/browserslist-config (8.0.3)","@ornikar/commitlint-config (8.3.2)","@ornikar/eslint-config-babel (24.0.1)","@ornikar/eslint-config-react (24.0.1)","@ornikar/eslint-config-typescript (24.0.1)","@ornikar/eslint-config-typescript-react (24.0.1)","@ornikar/eslint-plugin-neverthrow (1.3.1)","@ornikar/eslint-plugin-ornikar (24.0.1)","@ornikar/graphql-config (1.1.1)","@ornikar/intl-config (10.0.2)","@ornikar/kitt (21.0.1)","@ornikar/monorepo-config (14.3.2)","@ornikar/postcss-config (9.1.2)","@ornikar/prettier-config (9.0.3)","@ornikar/prismic-components (0.0.2)","@ornikar/react-modern-calendar-datepicker (3.2.1)","@ornikar/react-native-svg-transformer (1.0.6)","@ornikar/renovate-config (9.0.2)","@ornikar/repo-config-react (13.0.8)","@ornikar/repo-config-react-legacy-css (15.1.2)","@ornikar/rollup-plugin-postcss (2.0.5)","@ornikar/stylelint-config (14.0.3)","@ornikar/typed-css-modules-loader (0.8.2)","@qlik/embed-react (2.5.3)","@qlik/embed-runtime (1.6.4)","@qlik/embed-web-components (1.7.3)","@qlik/runtime-module-loader (1.5.1)","@thiennq/docs-viewer (1.6.2)","babel-plugin-linaria-css-to-undefined (0.3.1)","cache-manager (7.2.10)","cacheable-request (13.0.20)","http-metrics-middleware (2.2.2)","picasso-plugin-hammer (2.11.6)","picasso-plugin-q (2.11.6)","pob-test-package-in-monorepo (5.2.1)"],"_cs_severities":["high"],"_cs_tags":["campaign","shai-hulud"],"_cs_type":"advisory","_cs_vendors":["Jscrambler","npm","Amazon","Microsoft","Google","MetaMask","Phantom","Exodus","Bitwarden","Discord","Slack","Telegram","Valve","Anthropic","Cursor","Windsurf","Zed","GitHub","AsyncAPI","Brave","Mozilla","GitLab","JFrog","Docker","Node.js","Python","Ruby","SAP","TanStack","Mistral AI","UiPath","OpenSearch","Red Hat","Keyv","Cacheable","Ornikar","Qlik"],"content_html":"\u003cp\u003eThis brief tracks activity attributed to the Shai-Hulud campaign. Sightings and\nindicators from separate reports are folded in as they are published, rather\nthan creating a separate brief per report.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eReview the collected indicators and references and hunt for Shai-Hulud delivery\npatterns across endpoint and network telemetry.\u003c/p\u003e\n","date_modified":"2026-08-04T13:39:57Z","date_published":"2026-07-09T13:04:28Z","id":"https://feed.craftedsignal.io/briefs/2026-07-shai-hulud-campaign/","summary":"Tracking brief for the Shai-Hulud campaign; individual sightings are folded in as reported.","title":"Shai-Hulud Campaign Activity","url":"https://feed.craftedsignal.io/briefs/2026-07-shai-hulud-campaign/"}],"language":"en","title":"CraftedSignal Threat Feed - Cacheable","version":"https://jsonfeed.org/version/1.1"}