Mini Shai-HuludMalware
Mini Shai-Hulud is a credential stealer and self-replicating supply chain worm, derived from Shai-Hulud, that has been used by TeamPCP to target Continuous Integration and Continuous Delivery/Deployment (CI/CD) workflows since at least 2026.From MITRE ATT&CK
Last reported 8 days ago, by Cyble11 reports
ATT&CK techniques
6 of 30 · each with the sentence it comes from- T1195Supply Chain Compromise
““Widespread Supply Chain Compromise Impacting npm Ecosystem.” September 23, 2025.”
- T1219Remote Access Tools
“Detection logic should hunt for repetitive RMM and remote access tools, archive or installer abuse, and cross-OS exfiltration patterns.”
- T1684Social Engineering
“Read more: ClickFix Explosion: Cross-Platform Social Engineering Turns Users Into Malware Installers”
- T1036.005Match Legitimate Resource Name or Location
“T1036.005 Match Legitimate Resource Name or Location Typosquatting, e.g.”
- T1055Process Injection
“Malware loader that uses DLL sideloading to deliver additional payloads through process injection”
- T1059Command and Scripting Interpreter
“T1059.004 Command and Scripting Interpreter: Unix Shell Shell scripts and Bun-based payloads executing in CI runners”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
11 reports, newest first · the exact sentence from each-
Your AI Agent Doesn’t Have MFA“The OWASP GenAI Security Project's third-quarter roundup says the Mini Shai-Hulud and Miasma worm waves abused configuration files tied to Claude Code, Gemini CLI and Cursor to keep themselves running.”
-
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm“…gust 2026 in connection with the compromise of hundreds of npm packages, including Keyv and Cacheable, that were found to contain a Mini Shai-Hulud variant with a self-propagating credential-stealing worm delivered through an obfuscated Bun-based JavaScript payload.”
-
The Developer is the New Perimeter: How Supply Chain Attacks Are Becoming Cloud Breaches“By May 2026, Mini Shai-Hulud had shifted execution to the preinstall lifecycle hook, meaning credentials could be stolen even if the package installation was cancelled after the hook fired.”
-
Risky Bulletin: Intel ends paid bug bounties“Mini Shai-Hulud returns, by accident: GitHub accidentally triggered a new wave of infections earlier this month with the Mini Shai-Hulud npm worm.”
-
Cyber Brief 26-06 - May 2026“TeamPCP's Mini Shai-Hulud worm compromised over 160 npm and PyPI packages.”
-
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware“Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware”
-
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud“Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud”
-
Happy Birthday, Shai-Hulud“New waves arrived in April 2026 ("The Third Coming") and again at the end of that month ("Mini Shai-Hulud").”
-
6 Months on Alert: Get H1 2026 Cyber Risk Report for SOCs and MSSPs“Campaigns such as Mini Shai-Hulud do not only infect packages, but can also spread further by abusing victim tokens and pipelines.”
-
Tracking Shai-Hulud: Inside the ChainDrop NPM Worm“ChainDrop is a variant of Mini Shai-Hulud linked to TeamPCP.”
-
Intelligence Insights: June 2026“May’s campaign, dubbed “Mini Shai-Hulud” by researchers, ran a self-propagating worm across npm and PyPI ecosystems, using a malicious TanStack CI workflow commit as their entry point.”
Indicators in its reports
named in the reports above- f92ee93a0af971a3966bfa8efa9c2625in 1 report
- 7bcf8d9f6834c44450eac145a967d2f2in 1 report
- 4140f7e17e6f97f83aa3472473e01addin 1 report
- hxxps://npm-cache[.]com/routerin 1 report
- npm-cache[.]comin 1 report
- awqhnjewqjkl[.]icuin 1 report
- t.m-kosche[.]comin 1 report
- hxxps://amber-22[.]com/api/metrics/run?event=pastedin 1 report
- amber-22[.]comin 1 report
- hxxp://195.10.205[.]212/Cpchain 1 report
- 195.10.205[.]212in 1 report
- 35613analytics[.]comin 1 report
Copy these 12 indicators · defanged
Thanks — we review every report.