Malware named Shai-Hulud has been discovered embedded in malicious versions of the Red Hat npm package, with the compromised packages downloaded approximately 80,000 times per week. The supply chain a…
The Shai-Hulud, a self-replicating AI worm that spreads through LLM-powered systems by embedding adversarial prompts in external content, has had its source code publicly released. This development lo…
A developer has released an open-source supply-chain audit script, "Mini Shai-Hulud," designed to detect the TanStack Router and Mistral AI supply-chain attacks. The bash script checks for specific SH…
The PyTorch Lightning deep-learning framework was compromised on PyPI, with versions 2.6.2 and 2.6.3 containing a credential-stealing worm called Shai-Hulud. The malware activates when Python code run…