Cybersecurity articles tagged #Mini Shai Hulud on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/malware-evades-ai-analysis-with-forbidden-text-tacticshttps://runtimerebel.com/blog/malware-evades-ai-analysis-with-forbidden-text-tacticsThreat actors embed 'forbidden' text in malware to confuse AI analysis tools, targeting bioinformatics and MCP developers.Thu, 25 Jun 2026 05:28:25 GMTAI EvasionMalware AnalysisMini Shai HuludMiasmaHades WormsBioinformatics SecuritySupply Chain Securityhttps://runtimerebel.com/blog/teampcp-campaign-update-mini-shai-hulud-framework-gains-adoptionhttps://runtimerebel.com/blog/teampcp-campaign-update-mini-shai-hulud-framework-gains-adoptionAnalysis of the TeamPCP supply chain campaign, the open-sourcing of the Mini Shai-Hulud framework, and its adoption by diverse threat actor groups in 2026.Mon, 08 Jun 2026 17:14:51 GMTTeamPCPMini Shai HuludSupply Chain AttackVulnerability ScannerThreat Intelligencehttps://runtimerebel.com/blog/miasma-supply-chain-attack-defending-red-hat-npm-environmentshttps://runtimerebel.com/blog/miasma-supply-chain-attack-defending-red-hat-npm-environmentsAnalysis of the Miasma supply chain attack targeting Red Hat npm packages with credential-stealing worms. Technical details and mitigation guide for SOC teams.Mon, 01 Jun 2026 21:14:46 GMTRed HatNPMMiasmaSupply Chain AttackCredential TheftMini Shai Huludhttps://runtimerebel.com/blog/320-antv-npm-packages-compromised-in-mini-shai-hulud-attackhttps://runtimerebel.com/blog/320-antv-npm-packages-compromised-in-mini-shai-hulud-attackA maintainer account compromise has led to a major supply chain attack against Alibaba’s @antv NPM namespace, impacting over 320 visualization packages.Wed, 20 May 2026 13:06:33 GMTNPMMini Shai HuludAntvSupply Chain SecurityJavaScripthttps://runtimerebel.com/blog/teampcp-jenkins-plugin-compromise-and-mini-shai-hulud-worm-analysishttps://runtimerebel.com/blog/teampcp-jenkins-plugin-compromise-and-mini-shai-hulud-worm-analysisTeamPCP escalates its supply chain campaign with a confirmed Jenkins plugin compromise and a self-spreading worm targeting the npm and PyPI ecosystems.Mon, 18 May 2026 20:38:04 GMTTeamPCPJenkinsNPMPyPIMini Shai HuludSupply Chain Attackhttps://runtimerebel.com/blog/mini-shai-hulud-worm-compromises-tanstack-and-mistral-ai-packageshttps://runtimerebel.com/blog/mini-shai-hulud-worm-compromises-tanstack-and-mistral-ai-packagesTeamPCP actor compromises major npm and PyPI packages including TanStack and Mistral AI via the Mini Shai-Hulud worm, deploying profiling malware.Tue, 12 May 2026 09:04:37 GMTTeamPCPMini Shai HuludNPMPyPISupply Chain Attackhttps://runtimerebel.com/blog/teampcp-targets-sap-npm-packages-mini-shai-hulud-supply-chain-attackhttps://runtimerebel.com/blog/teampcp-targets-sap-npm-packages-mini-shai-hulud-supply-chain-attackTeamPCP broadens supply chain attacks, compromising npm packages in SAP's cloud development ecosystem with the 'Mini Shai-Hulud' malicious code injection.Fri, 01 May 2026 00:54:59 GMTTeamPCPSAPNPMSupply Chain AttackMini Shai HuludCloud Securityhttps://runtimerebel.com/blog/sap-npm-supply-chain-attack-analyzing-the-mini-shai-hulud-campaignhttps://runtimerebel.com/blog/sap-npm-supply-chain-attack-analyzing-the-mini-shai-hulud-campaignSecurity researchers identified a malicious supply chain attack targeting SAP via NPM packages using the Bun runtime to evade traditional EDR detection.Thu, 30 Apr 2026 16:38:51 GMTSAPNPM SecurityMini Shai HuludDependency ConfusionBun RuntimeDevSecOpshttps://runtimerebel.com/blog/sap-npm-packages-compromised-by-mini-shai-hulud-malwarehttps://runtimerebel.com/blog/sap-npm-packages-compromised-by-mini-shai-hulud-malwareThe Mini Shai-Hulud campaign targets SAP cloud application developers with credential-stealing npm packages. Learn how to detect and mitigate this threat.Wed, 29 Apr 2026 16:37:44 GMTSAPNPMMini Shai HuludSupply Chain AttackWizCredential Theft