Shai-Hulud Rises From the Dead after 111 days
ID: c1ba4345-fdba-5b3e-94ed-9e2f5eaefb09
STIX ID: report--c1ba4345-fdba-5b3e-94ed-9e2f5eaefb09
Feed Name: Aikido Security's Blog
Threat Score
A known malicious npm payload (SHA256 e37e3d...) from the May "Shai-Hulud" supply-chain wave resurfaced on September 7 after 111 days of silence, appearing in four new packages despite npm's publish-time malware scanning; the report includes IOCs (C2 domain, SHA256, file and persistence artifacts) and emphasizes a detection gap at the registry level.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.