Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data
A cluster of 77 malicious extensions on the Open VSX marketplace has been discovered impersonating legitimate developer tools while exfiltrating sensitive information…
Tag: Mini Shai-Hulud
Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack
Cybersecurity researchers have flagged a new evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades malware family,…
Mini Shai-Hulud: Self-Propagating Credential-Stealing Worm
Mini Shai-Hulud is a self-propagating credential-stealing worm delivered through a large, heavily obfuscated Bun-based JavaScript payload. It executes automatically via npm preinstall…