Loading story…
A new variant of the Shai-Hulud npm supply chain worm, dubbed Shai-Hulud 3.0, has been discovered embedded in the npm package @vietmoney/react-big-calendar version 0.26.2. This updated strain features enhanced obfuscation, improved error handling, and better Windows compatibility, but retains the core infection and exfiltration mechanics of previous versions. The malware executes malicious code at install time via a preinstall script, leveraging the Bun runtime to steal secrets and evade detection, posing a significant risk to CI/CD pipelines and developer environments.
Researchers have identified several changes in this latest strain, including new file names such as bun_installer.js and environment_source.js, and altered GitHub repository descriptions used for exfiltration. Notably, the "dead man switch" present in earlier versions appears to have been removed. At the time of discovery, there was no evidence of widespread infection, suggesting the attackers may have been testing their payload. Security teams are advised to monitor for suspicious activity related to this package and review dependencies for potential compromise.
Trace attribution and downstream blast radius.
5 events from the most recent confirmed update back to the earliest known activity.
Researchers documented altered file structure and filenames, removal of the prior dead-man switch, improved TruffleHog timeout handling, better Windows and Bun compatibility, and changed GitHub exfiltration behavior using repositories described as "Goldox-T3chs: Only Happy Girl." They also noted a likely bug involving fetching "c0nt3nts.json" but saving "c9nt3nts.json."
Initial analysis found no evidence of major spread, widespread infections, or multiple compromised packages beyond the single npm package. Researchers concluded the actor was likely testing or probing the updated payload rather than conducting a broad campaign.
On December 29, 2025, researchers identified a new Shai-Hulud variant, dubbed "The Golden Path" or v3.0, in npm package @vietmoney/react-big-calendar version 0.26.2. Analysis indicated the malware was re-obfuscated from original source code and represented an evolution of the existing worm.
A later report says researchers had not observed any new packages or repositories linked to the malware after December 10, 2025. This marked a lull in visible activity before the newly reported variant appeared.
Reporting on the new variant states the broader Shai-Hulud campaign was first detected in September 2025. The malware is known for harvesting developer credentials and self-propagating through compromised npm packages.
Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.
Indicator values are masked on this page. See the values in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.
See attribution and downstream blast radius, and whether this package or vendor reaches your builds.
7 references tracked. Mallory keeps watching after this page renders.
cybersecuritynews.com
Open sourcethehackernews.com
Open sourceupwind.io
Open sourcesnyk.io
Open sourcegovinfosecurity.com
Open sourceaikido.dev
Open sourcegetsafety.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A series of sophisticated supply chain attacks targeted the npm JavaScript ecosystem, culminating in the discovery of the Shai-Hulud worm, which demonstrated the potential for self-propagating malware within open-source package registries. Attackers initially compromised credentials of trusted maintainers through social engineering, leading to the injection of malicious payloads into high-profile packages such as Chalk, Debug, ansi-styles, and supports-color. These packages, collectively downloaded billions of times weekly, were updated with malware designed to intercept cryptocurrency activity and manipulate transactions for the attackers' benefit. The rapid response from maintainers and npm limited the exposure window, but any systems or build pipelines that fetched the compromised packages during this period were at risk. Shortly after, the Shai-Hulud worm emerged, marking one of the first large-scale, self-replicating malware outbreaks in the npm supply chain. The worm exploited compromised developer accounts to inject malicious code into all packages maintained by those accounts, leveraging package interdependencies to spread autonomously. Upon installation, the infected packages executed a postinstall script that deployed a malicious bundle.js, which searched for and harvested sensitive credentials, including npm tokens, GitHub personal access tokens, and cloud provider credentials such as AWS and GCP. The worm used tools like TruffleHog to identify and exfiltrate over 800 types of secrets, sending them to attacker-controlled GitHub repositories. In some cases, the worm published new malicious package versions using stolen npm tokens, further amplifying its reach. The attacks highlighted the dangers of install scripts in npm packages and the limitations of simply banning such scripts, as attackers continually adapt their methods. Security experts emphasized the need for a mindset shift among developers, urging them to understand the risks inherent in running npm install and to adopt smarter dependency management practices. The incidents also exposed the risks posed by misconfigured GitHub Actions and the weaponization of AI tools to scan for secrets, expanding the attack surface. While the immediate crisis was contained, the events underscored the critical importance of rapid incident response, credential hygiene, and robust supply chain security measures. Organizations were advised to audit their dependencies, monitor for suspicious package updates, and implement automated secret scanning in their CI/CD pipelines. The Shai-Hulud outbreak served as a wake-up call for the open-source community, demonstrating that even widely trusted packages and maintainers can become vectors for large-scale compromise.
Jun 29, 2026
A supply-chain malware campaign known as **Shai-Hulud** compromised hundreds of packages in the npm ecosystem and later spread into both npm and PyPI, using stolen maintainer credentials and trusted publishing workflows to push trojanized releases. Early reporting said the worm affected more than 500 npm packages, searched infected developer and CI/CD environments for GitHub Personal Access Tokens, cloud API keys, and other secrets, and exfiltrated them to attacker-controlled infrastructure and public GitHub repositories. GitHub removed hundreds of malicious packages, while CISA urged organizations to review dependencies, check for cached malicious packages, rotate credentials, and enforce phishing-resistant MFA for developer accounts. Later waves became more aggressive and broader in scope. Researchers said a second campaign hit hundreds more npm packages and had a blast radius exceeding **27,000 repositories**, abusing `preinstall` and other lifecycle hooks to steal secrets, hijack GitHub Actions, self-propagate into additional packages, and in some cases deploy a conditional wiper-like payload. A subsequent **Mini Shai-Hulud** wave affected more than 170 packages across npm and PyPI, including packages tied to TanStack, Mistral AI, OpenSearch, Guardrails AI, UiPath, and others; it used files such as `router_init.js`, invoked Bun through malicious package scripts, targeted npm, GitHub, cloud, Kubernetes, Vault, and CI/CD credentials, and demonstrated that provenance and OIDC-based trusted publishing can still be abused when attacker-controlled code runs inside legitimate release workflows.
Jun 30, 2026
A large-scale supply chain attack has targeted the Node Package Manager (NPM) ecosystem, compromising hundreds of widely used JavaScript packages and threatening the security of software development pipelines globally. In mid-September, cybersecurity researchers identified a self-propagating malware dubbed "Shai-Hulud," which was distributed through trojanized NPM packages, including some with millions of weekly downloads and high-profile packages such as those from CrowdStrike. The attack leveraged a malicious "bundle.js" script that downloaded and executed TruffleHog, a legitimate credential scanner, to harvest developer and CI/CD tokens, cloud service credentials, and environment variables from compromised systems. The stolen credentials were exfiltrated via hard-coded webhooks and GitHub Actions workflows, enabling the attacker to further propagate the malware and gain unauthorized access to sensitive resources. The campaign affected both Windows and Linux systems, increasing its reach and impact across diverse development environments. Sysdig reported that the attack on September 15 involved approximately 200 compromised packages, including @ctrl/tinycolor, and was linked to an attacker who had previously targeted Nx packages in late August. The worm not only stole secrets but also published them publicly on GitHub and attempted to make victim repositories public, amplifying the risk of further compromise. Earlier in the month, other popular packages such as chalk, debug, and duck were also compromised following a successful spear phishing attack against a maintainer, with the attacker seeking to redirect cryptocurrency payments. NPM responded by removing the malicious package versions, but users were required to update or revert to secure versions to mitigate the risk. Sysdig provided same-day threat intelligence and detection capabilities to its customers, including open source Falco rules to identify and respond to the threat. The attack demonstrated the vulnerability of even the most trusted and widely used open source packages, highlighting the importance of continuous monitoring and rapid response in the software supply chain. Security researchers and vendors emphasized the need for organizations to scan their environments for known malicious packages, such as dist.fezbox.cjs, and to review logs for signs of credential exfiltration. The incident underscored the evolving tactics of threat actors targeting developer ecosystems, using advanced techniques to automate propagation and maximize impact. Organizations relying on NPM packages and CI/CD pipelines were urged to remain vigilant, update dependencies promptly, and leverage threat intelligence resources to defend against similar attacks. The Shai-Hulud campaign remains an evolving threat, with ongoing analysis and mitigation efforts by the security community. This incident serves as a stark reminder that popularity and trust in open source packages do not guarantee safety, and proactive security measures are essential to protect software supply chains from compromise.
Jun 29, 2026