⤷ Title: The “Mini Shai-Hulud” Attack Hijacking SAP Developer Pipelines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:04:51 +0000
════════════════════════
⌗ Tags: #Malware #@cap_js/sqlite #aws security #Azure #Bun runtime #CI/CD security #credential stealer #infosec #Kubernetes #mbt #Mini Shai_Hulud #npm malware #SAP #supply chain attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:04:51 +0000
════════════════════════
⌗ Tags: #Malware #@cap_js/sqlite #aws security #Azure #Bun runtime #CI/CD security #credential stealer #infosec #Kubernetes #mbt #Mini Shai_Hulud #npm malware #SAP #supply chain attack
Daily CyberSecurity
The "Mini Shai-Hulud" Attack Hijacking SAP Developer Pipelines
SAP developers are under attack. A surgical credential stealer hijacks CI/CD runners and cloud tokens via npm preinstall hooks. Rotate all secrets immediately.
⤷ Title: The Worm Turns to PHP: Mini Shai-Hulud’s 20-Million-Install Hijack of Intercom
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 02 May 2026 02:52:05 +0000
════════════════════════
⌗ Tags: #Malware #Bun runtime #Composer Exploit #cybersecurity #infosec #Intercom_PHP #Mini Shai_Hulud #Packagist #PHP Malware #Secret Theft #Socket #supply chain attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 02 May 2026 02:52:05 +0000
════════════════════════
⌗ Tags: #Malware #Bun runtime #Composer Exploit #cybersecurity #infosec #Intercom_PHP #Mini Shai_Hulud #Packagist #PHP Malware #Secret Theft #Socket #supply chain attack
Daily CyberSecurity
The Worm Turns to PHP: Mini Shai-Hulud’s 20-Million-Install Hijack of Intercom
Socket uncovers a massive Mini Shai-Hulud breach in the Intercom PHP SDK. Malicious version 5.0.2 steals cloud secrets and GitHub tokens. Rotate keys now!
⤷ Title: Developer Alert: Poisoned Nx Console VS Code Extension Steals AWS, npm, and GitHub Tokens
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:37:38 +0000
════════════════════════
⌗ Tags: #Malware #Bun JavaScript Runtime #Dangling Orphan Commit #DNS Tunneling Exfiltration #GitHub Token Theft #Multi_Stage Credential Harvester #Nx Console Extension Compromise #rwl.angular_console #Sigstore Supply Chain Poisoning #StepSecurity Forensic Audit #Visual Studio Code Marketplace
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:37:38 +0000
════════════════════════
⌗ Tags: #Malware #Bun JavaScript Runtime #Dangling Orphan Commit #DNS Tunneling Exfiltration #GitHub Token Theft #Multi_Stage Credential Harvester #Nx Console Extension Compromise #rwl.angular_console #Sigstore Supply Chain Poisoning #StepSecurity Forensic Audit #Visual Studio Code Marketplace
Penetration Testing Tools
Developer Alert: Poisoned Nx Console VS Code Extension Steals AWS, npm, and GitHub Tokens
The highly popular Nx Console extension for Visual Studio Code has been compromised via a weaponized supply-chain injection.
⤷ Title: Supply Chain Sabotage: The Infiltration of the npm Registry
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 02:22:39 +0000
════════════════════════
⌗ Tags: #Malware #AWS credential theft #Bun runtime malware #malicious npm packages #Microsoft Threat Intelligence #typosquatting supply chain attack #vpmdhaj repository exploit
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 02:22:39 +0000
════════════════════════
⌗ Tags: #Malware #AWS credential theft #Bun runtime malware #malicious npm packages #Microsoft Threat Intelligence #typosquatting supply chain attack #vpmdhaj repository exploit