/
ttps_attack:T1485 × victim_sectors:"software development" × limpar

Resultados

2 casos · pág. 1/1

safedep.io · high

Mini Shai-Hulud worm keeps infecting GitHub repos via hijacked actions-cool/issues-helper tags months after the May 2026 compromise

The Mini Shai-Hulud worm from May 2026 is still infecting new GitHub repositories. SafeDep found six repositories that received malicious hook files between 20 and 24 September 2026. The cause is that all tags of the actions-cool/issues-helper GitHub Action, hijacked on 18 May 2026, still point to the malicious commit, and the payload is …

software development
safedep.io · critical

tensorlake 0.5.144 npm package compromised to deliver Mini Shai-Hulud credential-stealing worm

SafeDep identified a malicious tensorlake npm release, version 0.5.144 (about 106,000 monthly downloads), that ran a Mini Shai-Hulud worm on install. It was published at 01:12:07 UTC on 8 October and flagged by SafeDep eight minutes later. The attacker used a repository administrator account to commit the payload to main through the GitHu…

technology software development