miasma-toolkit

Miasma / Shai-Hulud toolkit Analisi degli incidenti + strumenti di rilevamento/risanamento per il worm Miasma una variante Mini Shai-Hulud che inietta payload ad avvio automatico nelle configurazioni di agenti AI / IDE e nei repository npm/GitHub. ⚠️ Disclaimer — nessuna garanzia. Questo è un...

shai-scan

shai-scan Scanner CLI sem dependências para comprometimentos na cadeia de suprimentos do npm e PyPI. Por quê? Em 11 de maio de 2026, um worm de cadeia de suprimentos autopropagante apelidado de Mini Shai-Hulud CVE-2026-45321, GHSA-g7cv-rxg3-hmpx comprometeu o ecossistema npm. Atribuído ao TeamPCP...

tanstack-shield

🛡️ tanstack-shield Ein-Befehl-Scanner für Supply-Chain-Angriffe für CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx Erkennt den „Mini Shai-Hulud“-Wurm, der am 11. Mai 2026 42 @tanstack/ npm-Pakete 84 bösartige Versionen kompromittierte. root@kitploit: One line — scan your project curl -fsSL...

mini-shai-hulud-scanner

Mini Shai-Hulud Scanner Un scanner gratuito e offline per il worm della supply chain npm/PyPI che sta attualmente colpendo i principali pacchetti. Creato dal team di Intrudify. Nessuna registrazione, nessuna telemetria, funziona interamente offline. NHS CC-4781 · CVE-2026-45321 CVSS 9.6 ·...

mini-shai-hulud-detector

Mini Shai-Hulud Detector Ein-Befehl-Scanner für die Mini Shai-Hulud npm-Supply-Chain-Attacke CVE-2026-45321, CVSS 9.6. Wichtig: Vor dem Rotieren der Tokens erkennen Der Wurm installiert einen Persistenz-Daemon gh-token-monitor, der rm -rf ausführt, wenn er eine Sperrung von Anmeldedaten erkennt...

tanstack-compromise-checker

tanstack-compromise-checker ⚠️ Disclaimer: Questo strumento è stato creato per il mio caso d'uso personale. Tutti gli indicatori derivano dalle seguenti fonti advisory: GHSA-g7cv-rxg3-hmpx Snyk: TanStack npm packages compromised StepSecurity: Mini Shai-Hulud deep dive Se emergono nuovi IOC,...

shai-hulud-scan

shai-hulud-scan Ein Claude Code-Skill, der Maschinen auf Anzeichen einer Kompromittierung IOCs durch den Mini-Shai-Hulud -Supply-Chain-Wurm CVE-2026-45321, CVSS 9.6 scannt. Was ist Mini Shai-Hulud? Ein sich selbst verbreitender Supply-Chain-Wurm, der am 11. Mai 2026 über 170 npm/PyPI-Pakete...

scan-shai-hulud

scan-shai-hulud एक तेज़, शून्य-निर्भरता वाला Bash स्कैनर जो यह पता लगाता है कि आपकी मशीन CVE-2026-45321 "Mini Shai-Hulud" आपूर्ति श्रृंखला हमले से प्रभावित है या नहीं। 11 मई, 2026 को, TanStack, Mistral AI, UiPath, OpenSearch और Guardrails AI के 170 npm पैकेज और 2 PyPI पैकेज एक साथ जहर दिए गए।...

MAL-2026-11954 Malicious code in @umacloud/cli-darwin-x64 (npm)

npm/@umacloud/cli-darwin-x64 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11807 Malicious code in @qlik/sprout-icons (npm)

npm/@qlik/sprout-icons is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

Malicious code in @nebula.js/snapshooter (npm)

npm/@nebula.js/snapshooter is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11577 Malicious code in @nebula.js/sn-map (npm)

npm/@nebula.js/sn-map is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...

MAL-2026-11572 Malicious code in @nebula.js/sn-animator (npm)

npm/@nebula.js/sn-animator is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11867 Malicious code in @servicetitan/feature-spotlight (npm)

npm/@servicetitan/feature-spotlight is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @servicetitan/anvil-icon (npm)

npm/@servicetitan/anvil-icon is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11735 Malicious code in @or-sdk/users (npm)

npm/@or-sdk/users is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by th...

MAL-2026-11951 Malicious code in @servicetitan/widget-platform-monolith (npm)

npm/@servicetitan/widget-platform-monolith is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...

Malicious code in @servicetitan/measure-sheet-data (npm)

npm/@servicetitan/measure-sheet-data is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized an...

MAL-2026-11853 Malicious code in @servicetitan/docs-anvil-uikit-contrib (npm)

npm/@servicetitan/docs-anvil-uikit-contrib is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...

MAL-2026-11863 Malicious code in @servicetitan/eslint-plugin-folder-schema (npm)

npm/@servicetitan/eslint-plugin-folder-schema is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...