⤷ Title: npm Supply Chain Attack Hijacks Keyv and Spreads Shai-Hulud Malware
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 14:12:20 +0000
════════════════════════
⌗ Tags: #Malware #cacheable #CI/CD security #credential stealer #keyv #npm #Shai_Hulud #Software Supply Chain #supply chain attack
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 14:12:20 +0000
════════════════════════
⌗ Tags: #Malware #cacheable #CI/CD security #credential stealer #keyv #npm #Shai_Hulud #Software Supply Chain #supply chain attack
Daily CyberSecurity
npm Supply Chain Attack Hijacks Keyv and Spreads Shai-Hulud Malware
At a glance Malware family Shai-Hulud variant (“Mini Shai-Hulud”) Threat actor Unattributed; linked to the Shai-Hulud lineage and prior TeamPCP and antv campaigns Targets npm and JavaS…