#Shai-Hulud
All CosmicBytez Labs articles tagged #Shai-Hulud, across news, security advisories, how-to guides, and projects.
- News
Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data
Stolen OAuth token from May's TanStack npm worm let attackers clone 170 CrowdSec private repos, undetected for four months.
- News
Two Alleged TeamPCP Supply-Chain Hackers Arrested in Australia
AFP charges two Western Australia men with 14 cybercrime offenses tied to TeamPCP's Shai-Hulud worm and LiteLLM, GitHub supply-chain attacks.
- News
The Hackers Behind Shai-Hulud: Lucky or Skilled?
TeamPCP's Shai-Hulud worm inflicted serious damage on the open source ecosystem — but a close look at their operations raises the question of whether their.
- News
GitHub Confirms Being Hacked by TeamPCP, Says Customer Data
GitHub has officially confirmed it was breached by the TeamPCP threat actor after the group advertised stolen internal source code on a cybercrime forum....
- Newsletter
May 20 Digest: Exchange Zero-Day, Verizon DBIR, GitHub
A Microsoft Exchange zero-day is being exploited with no patch in sight; Verizon DBIR 2026 marks a landmark shift — vulnerability exploitation now...
- News
Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware
Researchers have uncovered four malicious npm packages embedding infostealer malware and a Phantom Bot DDoS payload — one of which is a direct clone of...
- News
TeamPCP Ups the Game, Releases Shai-Hulud Worm's Source Code
The hacking group TeamPCP has publicly released the source code for its Shai-Hulud supply chain worm, actively encouraging other threat actors to...