Cybersecurity articles tagged #Shai Hulud on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/teampcp-hackers-arrested-in-australia-over-supply-chain-attackshttps://runtimerebel.com/blog/teampcp-hackers-arrested-in-australia-over-supply-chain-attacksAustralian Federal Police arrest two men linked to TeamPCP, a cybercrime syndicate behind major software supply chain attacks and data extortion.Tue, 01 Sep 2026 02:41:36 GMTTeamPCPSupply Chain AttackShai HuludGitHubLiteLLMhttps://runtimerebel.com/blog/teampcp-supply-chain-attack-trivy-compromise-impacts-2500-orgshttps://runtimerebel.com/blog/teampcp-supply-chain-attack-trivy-compromise-impacts-2500-orgsA supply chain attack attributed to TeamPCP compromised over 2,500 organizations, primarily through Aqua Security's Trivy scanner, not LiteLLM.Sat, 15 Aug 2026 00:42:24 GMTTeamPCPTrivyLiteLLMSupply Chain AttackShai Huludhttps://runtimerebel.com/blog/npm-supply-chain-attacks-shai-hulud-miasma-and-ci-cd-compromiseshttps://runtimerebel.com/blog/npm-supply-chain-attacks-shai-hulud-miasma-and-ci-cd-compromisesThe npm ecosystem faces escalating supply chain attacks like Shai-Hulud and Miasma RAT, leading to credential theft and widespread package compromise.Sat, 08 Aug 2026 16:26:28 GMTNPMSupply Chain AttackShai HuludTeamPCPCI CD Securityhttps://runtimerebel.com/blog/shai-hulud-attack-trojanized-pypi-packages-steal-developer-secretshttps://runtimerebel.com/blog/shai-hulud-attack-trojanized-pypi-packages-steal-developer-secretsNew Shai-Hulud supply chain attack compromises 19 science-focused PyPI packages, distributing malware to steal developer credentials and secrets.Mon, 08 Jun 2026 20:57:57 GMTShai HuludPyPISupply Chain AttackMalwareDeveloper SecretsPythonOpen Source Securityhttps://runtimerebel.com/blog/red-hat-npm-supply-chain-compromise-miasma-steals-dev-credentialshttps://runtimerebel.com/blog/red-hat-npm-supply-chain-compromise-miasma-steals-dev-credentialsOver 30 Red Hat npm packages under @redhat-cloud-services were compromised in a supply chain attack distributing Miasma malware to steal developer credentials.Tue, 02 Jun 2026 01:03:30 GMTRed HatNPMSupply Chain AttackMiasmaShai HuludDeveloper CredentialsCredential Thefthttps://runtimerebel.com/blog/shai-hulud-campaign-teampcp-targets-open-source-supply-chainhttps://runtimerebel.com/blog/shai-hulud-campaign-teampcp-targets-open-source-supply-chainAnalysis of the Shai-Hulud campaign by TeamPCP, detailing their open-source supply chain attacks, TTPs, and critical mitigation strategies.Tue, 26 May 2026 20:47:57 GMTTeamPCPShai HuludSupply Chain AttackOpen Source SecurityNPMPyPIMalicious Packageshttps://runtimerebel.com/blog/shai-hulud-worm-code-leak-how-clones-threaten-developer-environmentshttps://runtimerebel.com/blog/shai-hulud-worm-code-leak-how-clones-threaten-developer-environmentsThe release of Shai-Hulud worm source code triggers a surge in self-replicating clones, targeting software developers and automated CI/CD pipelines.Mon, 18 May 2026 20:37:43 GMTShai HuludWormDeveloper SecuritySource Code LeakMalware Analysishttps://runtimerebel.com/blog/shai-hulud-infostealer-surfaces-in-malicious-npm-package-campaignhttps://runtimerebel.com/blog/shai-hulud-infostealer-surfaces-in-malicious-npm-package-campaignLeaked Shai-Hulud malware is targeting Node.js developers via malicious npm packages, exfiltrating sensitive data and credentials to Telegram-based C2.Mon, 18 May 2026 20:37:20 GMTNPMShai HuludInfostealerSupply Chain AttackMalicious Packageshttps://runtimerebel.com/blog/shai-hulud-supply-chain-attack-malicious-npm-and-mistral-packageshttps://runtimerebel.com/blog/shai-hulud-supply-chain-attack-malicious-npm-and-mistral-packagesThe Shai-Hulud campaign targets developers with over 300 signed npm and PyPI packages impersonating TanStack and Mistral to steal sensitive credentials.Tue, 12 May 2026 12:48:53 GMTShai HuludNPMPyPISupply Chain AttackMistral AITanStackCredential Stealerhttps://runtimerebel.com/blog/bitwarden-npm-supply-chain-attack-analyzing-the-teampcp-campaignhttps://runtimerebel.com/blog/bitwarden-npm-supply-chain-attack-analyzing-the-teampcp-campaignA malicious npm package impersonating Bitwarden was discovered exfiltrating sensitive data via the Shai-Hulud worm in a recent supply chain attack.Fri, 24 Apr 2026 08:49:11 GMTNPMBitwardenTeamPCPShai HuludSupply Chain Security