Indicators of Compromise

Domain

TLP:CLEAR

copilot-instructions.md

Tracking Shai-Hulud: Inside the ChainDrop NPM Worm

75% confidence

Added

2026-08-12

Domain

TLP:CLEAR

Dev.to

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

api.anthropic.com

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

setup.js

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

JS.Malicious.npmpackage

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

setup.pth

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

b74caeaa75e077c99f7d44f46daaf9796a3be43ecf24f2a1fd381844669da777

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

setup.mdc

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

bun.sh

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

environment.json

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

truffleSecrets.json

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

format.json

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

contents.json

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

cloud.json

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

Runner.Listener

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

credentials.Microsoft

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

ENUM.PROCESS

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

a3894003ad1d293ba96d77881ccd2071446dc3f65f434669b49b3da92421901a

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

cbb9bc5a8496243e02f3cc080efbe3e4a1430ba0671f2e43a202bf45b05479cd

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

f099c5d9ec417d4445a0328ac0ada9cde79fc37410914103ae9c609cbc0ee068

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

46faab8ab153fae6e80e7cca38eab363075bb524edd79e42269217a083628f09

30% confidence

Added

2026-08-09

Domain

TLP:CLEAR

shai-hulud-workflow.yml

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

62ee164b9b306250c1172583f138c9614139264f889fa99614903c12755468d0

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

azureProfile.json

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

Node.JS

50% confidence

Added

2026-08-09

Filename

TLP:CLEAR

bundle.js

50% confidence

Added

2026-08-09

Domain

TLP:CLEAR

discussion.yaml

50% confidence

Added

2026-08-09

SHA-256 Hash

TLP:CLEAR

3f3f42d072bd36860ab7bd7fb5e10ac0d22c741c13c89505ccd6ec0ea572eea7

Major Shai Hulud campaign strikes npm again, affecting keyv and 400+ packages

75% confidence

Added

2026-08-06

SHA-256 Hash

TLP:CLEAR

29ac906c8bd801dfe1cb39596197df49f80fff2270b3e7fbab52278c24e4f1a7

Major Shai Hulud campaign strikes npm again, affecting keyv and 400+ packages

75% confidence

Added

2026-08-06

SHA-1 Hash

TLP:CLEAR

686aa40d0fc22c8d569494543a0f891f359f2f99

npm Packages Hijacked in Supply Chain Attack

75% confidence

Added

2026-08-05

SHA-1 Hash

TLP:CLEAR

f525d52ceb966516686b482d3dc0137028cc6a63

npm Packages Hijacked in Supply Chain Attack

75% confidence

Added

2026-08-05

SHA-1 Hash

TLP:CLEAR

35a672cf34b996b91f3e1c28cbf3a05a37e036e4

npm Packages Hijacked in Supply Chain Attack

75% confidence

Added

2026-08-05

Domain

TLP:CLEAR

go.getblock.io

npm Packages Hijacked in Supply Chain Attack

75% confidence

Added

2026-08-05

SHA-256 Hash

TLP:CLEAR

ef01e18ccf618a8992ad0aa4eb7d804bbacf9f092d43d39237f283a9a289c9b9

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

ef89e81be6b9d81b9d4bc41dae5f10a7a68f33b17fd76affcf7dca2f5d50a843

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

cf5d79494d8b1fdcb5480507eee8beeb2fcd69bcd9afcdc7dc1bcdda7461913e

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

d1db13a14db489531e11ccf700d7fd8701f61ad297ce02477e11acf194d3fed0

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

cc00c23768bee76e2f297c1766a013a681efb519888545352cff96fc5cead035

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

cf46348e7a4beacc0b9600c9ece3bee140f344641e90d99c741bc54507423443

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

d2aa3f9057c6f3295766aabed0a71a369353d6eb665049a45fd407fd55020fdb

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

a16810f972f577f129f95f147e64aa4c70977035285d357a53958496c0531223

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

ca89ece660251554b66f1e5e9874410d206e0f080da3039e1221f1c71d817395

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

b38a73c365e5761fe0e7f25a391db3a264b1f2b4878a1c8cc127ba83d64e614c

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

a09909e8981e17712ef38b363f94553e2f86b6c2abd6c87eada94d3d3aab937e

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

b4f90f5515df39cf346bf436e284f2dae28c9341c035765d83d82a76c86922b7

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

9df6bda43678708605dfaad35f02be8027e85e6aa38193704cf192f842f0d186

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

b82f5f6f1d969ba8f32937a3d81306c631defa943b7cc7529e45a0003340ece5

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

dfcdec5f43cc8d127084a2ac4d66499f13bae7f49167e3291a6f1a70738772d1

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

54086c0f23710ff45cb6bde498083d0a0098112aab9b0ef48e6e869a280f1b42

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05

SHA-256 Hash

TLP:CLEAR

60099babe48a48831262b40d4c5c1dd623726060da10c1e2f74f191c9c4cd81d

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

75% confidence

Added

2026-07-05