Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music Scraping

**Executive summary:** A Shai-Hulud worm infection of a Suno developer machine led to harvested GitHub and cloud credentials being exfiltrated to public GitHub repos, enabling a threat actor (ellie.191) to access and publish Suno source code, customer records, and payment-related data; leaked code and dataset comments also confirm mass scraping of multiple music platforms. The incident is part of a broader, active supply-chain campaign that has republished malicious packages across npm, PyPI and Packagist and includes variants with destructive fallbacks.