{"id":17420,"date":"2026-08-05T00:10:12","date_gmt":"2026-08-05T00:10:12","guid":{"rendered":"https:\/\/techtrendfeed.com\/?p=17420"},"modified":"2026-08-05T00:10:13","modified_gmt":"2026-08-05T00:10:13","slug":"shai-hulud-npm-worm-returns-poisoning-over-1280-npm-packages","status":"publish","type":"post","link":"https:\/\/techtrendfeed.com\/?p=17420","title":{"rendered":"Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<style><![CDATA[\n#ar-widget{margin:0 0 2rem;font-family:-apple-system,BlinkMacSystemFont,\"Segoe UI\",sans-serif;}\n#ar-widget .ar-box{background:#fff;border:1px solid #e5e7eb;border-radius:12px;padding:1.1rem 1.4rem;}\n#ar-widget .ar-top{display:flex;align-items:center;gap:10px;margin-bottom:.85rem;}\n#ar-widget .ar-icon-wrap{width:38px;height:38px;border-radius:50%;background:#EEEDFE;display:flex;align-items:center;justify-content:center;flex-shrink:0;}\n#ar-widget .ar-meta{flex:1;min-width:0;}\n#ar-widget .ar-label{font-size:10px;color:#9ca3af;text-transform:uppercase;letter-spacing:.06em;margin:0 0 2px;}\n#ar-widget .ar-title-text{font-size:13px;font-weight:600;margin:0;color:#111827;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;}\n#ar-widget .ar-progress-section{margin-bottom:.7rem;}\n#ar-widget #ar-seek{width:100%;height:4px;accent-color:#534AB7;cursor:pointer;display:block;margin:0;-webkit-appearance:none;appearance:none;background:#e5e7eb;border-radius:2px;outline:none;border:none;}\n#ar-widget #ar-seek::-webkit-slider-thumb{-webkit-appearance:none;width:14px;height:14px;border-radius:50%;background:#534AB7;cursor:pointer;}\n#ar-widget .ar-times{display:flex;justify-content:space-between;font-size:10px;color:#9ca3af;margin-top:3px;}\n#ar-widget .ar-controls{display:flex;align-items:center;gap:7px;flex-wrap:wrap;}\n#ar-widget .ar-controls button{border:1px solid #d1d5db;border-radius:8px;padding:5px 11px;background:#fff;cursor:pointer;font-size:12px;color:#374151;}\n#ar-widget .ar-controls button:hover{background:#f9fafb;}\n#ar-widget .ar-play-btn{border-color:#534AB7!important;color:#534AB7!important;font-weight:600;min-width:86px;text-align:center;}\n#ar-widget .ar-play-btn:hover{background:#EEEDFE!important;}\n#ar-widget .ar-speed-wrap{margin-left:auto;display:flex;align-items:center;gap:5px;}\n#ar-widget .ar-speed-wrap label{font-size:11px;color:#6b7280;}\n#ar-widget #ar-rate{border:1px solid #d1d5db;border-radius:6px;padding:3px 5px;font-size:11px;background:#fff;color:#374151;cursor:pointer;}\n#ar-widget #ar-status{font-size:11px;color:#9ca3af;margin:.65rem 0 0;padding-top:.65rem;border-top:1px solid #f3f4f6;}\n#ar-widget .ar-voice-row{display:flex;align-items:center;gap:6px;margin-top:8px;}\n#ar-widget .ar-voice-row label{font-size:11px;color:#6b7280;flex-shrink:0;}\n#ar-widget #ar-voice{flex:1;min-width:0;border:1px solid #d1d5db;border-radius:6px;padding:4px 6px;font-size:11px;background:#fff;color:#374151;cursor:pointer;}\n]]><\/style>\n<p class=\"wp-block-paragraph\">A quick-moving software program supply-chain assault has compromised Keyv and lots of of different npm packages, exposing developer workstations and steady integration techniques to credential-stealing malware. Aikido Safety recognized the malware as a Shai-Hulud variant, following earlier campaigns <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/hackread.com\/shai-hulud-npm-worm-supply-chain-attack\/\">reported by Hackread.com<\/a> in 2025.<\/p>\n<p class=\"wp-block-paragraph\">Aikido traced the preliminary assault to the GitHub account of developer Jared Wray, maintainer of Keyv, a key-value storage library receiving roughly 127 million weekly npm downloads. Attackers pushed malicious recordsdata on to the principle department and used the legit GitHub Actions launch course of to publish Keyv model 6.0.0.<\/p>\n<p class=\"wp-block-paragraph\">As a result of the poisoned launch handed via the challenge\u2019s regular publishing workflow, it carried legitimate provenance data on npm. The signature verified the place the bundle was constructed, however not whether or not the supply code getting into that course of was secure.<\/p>\n<h3 id=\"how-the-attack-works\" class=\"wp-block-heading\"><strong>How the Assault Works<\/strong><\/h3>\n<p class=\"wp-block-paragraph\">The primary poisoned releases recognized in Wray\u2019s bundle household included Keyv, flat-cache, file-entry-cache, cacheable-request, cacheable, cache-manager, @cacheable\/reminiscence, @cacheable\/node-cache, @cacheable\/utils, @cacheable\/web, and ecto.<\/p>\n<p class=\"wp-block-paragraph\">Every launch contained two added recordsdata named setup.mjs and <code>Math_Symbol.js<\/code>. Attackers additionally inserted the next lifecycle command into <code>bundle.json<\/code>:<\/p>\n<p class=\"wp-block-paragraph\"><code>\"preinstall\": \"node setup.mjs\"<\/code><\/p>\n<p class=\"wp-block-paragraph\">On npm shoppers that let dependency lifecycle scripts, putting in an affected model causes setup.mjs to execute earlier than set up finishes. Nonetheless, <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/docs.npmjs.com\/cli\/v12\/commands\/npm-approve-scripts\/\" target=\"_blank\" rel=\"noopener\">npm 12 blocks unapproved dependency set up scripts by default<\/a>, so the payload doesn&#8217;t run routinely below each npm configuration.<\/p>\n<p class=\"wp-block-paragraph\">As soon as executed, setup.mjs downloads Bun model 1.3.13 from its official GitHub launch web page and makes use of it to launch <code>Math_Symbol.js<\/code>. The closely obfuscated 728 KB payload searches for npm authentication tokens, GitHub credentials, AWS keys, Kubernetes secrets and techniques, HashiCorp Vault tokens, non-public keys, database credentials, and tokens belonging to companies corresponding to Stripe and Slack.<\/p>\n<p class=\"wp-block-paragraph\">After accumulating the knowledge, the malware encrypts it and uploads it to a public GitHub repository whose description incorporates \u201cShai-Hulud: Right here We Go Once more.\u201d If that add fails, it might probably ship the stolen information to <code>npm-cache(.)com<\/code>.<\/p>\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/hackread.com\/wp-content\/uploads\/2026\/08\/shai-hulud-npm-worm-poisoning-packages.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"479\" src=\"https:\/\/hackread.com\/wp-content\/uploads\/2026\/08\/shai-hulud-npm-worm-poisoning-packages-1024x479.png\" alt=\"Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages\" class=\"wp-image-148195\" srcset=\"https:\/\/hackread.com\/wp-content\/uploads\/2026\/08\/shai-hulud-npm-worm-poisoning-packages-1024x479.png 1024w, https:\/\/hackread.com\/wp-content\/uploads\/2026\/08\/shai-hulud-npm-worm-poisoning-packages-300x140.png 300w, https:\/\/hackread.com\/wp-content\/uploads\/2026\/08\/shai-hulud-npm-worm-poisoning-packages-768x359.png 768w, https:\/\/hackread.com\/wp-content\/uploads\/2026\/08\/shai-hulud-npm-worm-poisoning-packages-1536x718.png 1536w, https:\/\/hackread.com\/wp-content\/uploads\/2026\/08\/shai-hulud-npm-worm-poisoning-packages-2048x958.png 2048w, https:\/\/hackread.com\/wp-content\/uploads\/2026\/08\/shai-hulud-npm-worm-poisoning-packages-380x178.png 380w, https:\/\/hackread.com\/wp-content\/uploads\/2026\/08\/shai-hulud-npm-worm-poisoning-packages-800x374.png 800w, https:\/\/hackread.com\/wp-content\/uploads\/2026\/08\/shai-hulud-npm-worm-poisoning-packages-1160x542.png 1160w, https:\/\/hackread.com\/wp-content\/uploads\/2026\/08\/shai-hulud-npm-worm-poisoning-packages.png 2896w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\"\/><\/a><figcaption class=\"wp-element-caption\">Screenshot by way of Aikido Safety<\/figcaption><\/figure>\n<\/div>\n<h3 id=\"worm-reaches-packages-linked-to-major-companies\" class=\"wp-block-heading\"><strong>Worm Reaches Packages Linked to Main Firms<\/strong><\/h3>\n<p class=\"wp-block-paragraph\">By its 13:37 CEST replace, Aikido <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.aikido.dev\/blog\/keyv-and-friends-compromised-in-npm-supply-chain-attack\" rel=\"nofollow noopener\" target=\"_blank\">reported<\/a> no less than 868 affected packages involving 1,381 malicious variations. Collectively, these packages obtain greater than two billion month-to-month downloads. The determine describes their mixed regular obtain quantity, not two billion contaminated units or confirmed malware executions.<\/p>\n<p class=\"wp-block-paragraph\">Utilizing stolen npm and GitHub credentials, the worm modifies and republishes packages out there to different maintainers. Aikido researcher Charlie Eriksen later reported that fifty to 100 extra packages had been showing each couple of minutes, with the noticed depend passing 1,280.<\/p>\n<p class=\"wp-block-paragraph\">Packages linked to Deliveroo, OneReach, ServiceTitan, Picsart and Qlik appeared within the marketing campaign. Examples included:<\/p>\n<ul class=\"wp-block-list is-style-cnvs-list-styled-positive\">\n<li><code>@deliveroo\/reevent<\/code> model 1.0.1<\/li>\n<li><code>@or-sdk\/invites<\/code> model 1.4.9<\/li>\n<li><code>@picsart\/ai-sdk<\/code> model 3.32.2<\/li>\n<li><code>@qlik\/embed-runtime<\/code> model 1.6.4<\/li>\n<li><code>picasso.js<\/code> model 2.11.6<\/li>\n<\/ul>\n<p class=\"wp-block-paragraph\">Their presence exhibits that bundle publishing entry related to these names was abused. It doesn&#8217;t set up that the businesses\u2019 inner networks had been breached.<\/p>\n<h3 id=\"what-development-teams-should-do\" class=\"wp-block-heading\"><strong>What Improvement Groups Ought to Do<\/strong><\/h3>\n<p class=\"wp-block-paragraph\">Any workstation or CI runner that executed an affected model must be handled as credential-exposed. Eradicating the bundle alone won&#8217;t invalidate credentials already collected by the malware.<\/p>\n<p class=\"wp-block-paragraph\">Improvement groups ought to examine lockfiles for actual bundle variations, take away affected releases, rotate npm, GitHub, cloud, and Vault credentials, look at repositories for unauthorized commits, and assessment cloud logs for surprising entry. Aikido has additionally suggested prospects to set off an instantaneous handbook rescan as an alternative of ready for the corporate\u2019s nightly scan.<\/p>\n<p>\n\t\t\t<\/div>\n<p><template id="JlEnElJ14D8xdJm51VlG"></template><\/script><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A quick-moving software program supply-chain assault has compromised Keyv and lots of of different npm packages, exposing developer workstations and steady integration techniques to credential-stealing malware. Aikido Safety recognized the malware as a Shai-Hulud variant, following earlier campaigns reported by Hackread.com in 2025. Aikido traced the preliminary assault to the GitHub account of developer Jared [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":17422,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58],"tags":[1116,2987,6059,920,5393,5394],"class_list":["post-17420","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-npm","tag-packages","tag-poisoning","tag-returns","tag-shaihulud","tag-worm"],"_links":{"self":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/17420","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=17420"}],"version-history":[{"count":1,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/17420\/revisions"}],"predecessor-version":[{"id":17421,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/17420\/revisions\/17421"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/media\/17422"}],"wp:attachment":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=17420"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=17420"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=17420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}<!-- This website is optimized by Airlift. Learn more: https://airlift.net. Template:. Learn more: https://airlift.net. Template: 69d9690a190636c2e0989534. Config Timestamp: 2026-04-10 21:18:02 UTC, Cached Timestamp: 2026-08-05 02:06:03 UTC -->