A self-propagating malware strain called Sandworm_Mode is targeting AI coding assistants and software development environments, stealing credentials, API keys, and secrets across the AI toolchain, acc…
A threat actor breached AI music generator Suno by compromising a single employee with the Shai-Hulud worm, then used harvested GitHub and cloud credentials to access the company's source code, custom…
TypeScript developers face increased risk from malicious npm packages, with the Shai-Hulud 2.0 attack in November backdooring 796 packages totaling over 20 million weekly downloads and the Mini Shai-H…
Airgap, a new Linux tool, wraps programs in namespaces to hide secrets from AI agents and block npm malware that steals credentials at install time. It redacts sensitive files like .env and SSH keys f…
Malware named Shai-Hulud has been discovered embedded in malicious versions of the Red Hat npm package, with the compromised packages downloaded approximately 80,000 times per week. The supply chain a…
The Shai-Hulud, a self-replicating AI worm that spreads through LLM-powered systems by embedding adversarial prompts in external content, has had its source code publicly released. This development lo…
A developer has released an open-source supply-chain audit script, "Mini Shai-Hulud," designed to detect the TanStack Router and Mistral AI supply-chain attacks. The bash script checks for specific SH…
The PyTorch Lightning deep-learning framework was compromised on PyPI, with versions 2.6.2 and 2.6.3 containing a credential-stealing worm called Shai-Hulud. The malware activates when Python code run…