Reported by 4 outlets
Shai-Hulud Trinitite Supply-Chain Worm Compromises Popular npm Package
Why this score
- Breadth
- 2.00 / 2.0 · 4 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 1.70 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.02 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.1 / 10 = base × recency + community
Desk analysis
Shai-Hulud Trinitite is a new supply-chain campaign that compromised the npm package tensorlake version 0.5.144 and continues to target high-download libraries. The new variant embeds a self-replicating worm that steals developer secrets, browser-stored cryptocurrency credentials, and CI/CD access tokens, then propagates using recovered publishing credentials. A separate earlier wave hit @7nohe/openapi-react-query-codegen (150,000+ weekly downloads) through a malicious GitHub Actions workflow: attacker-controlled pull-request comments triggered trusted npm publishing via OIDC. The published malicious releases carried legitimate npm provenance, which only proves the automated workflow executed, not that the code was safe. JFrog and GBHackers both report no fixed releases for some affected components and an active, evolving worm family. Watch for additional package compromises and for platform-level fixes to GitHub Actions publishing controls.
Timeline
-
original reporting
Shai-Hulud Trinitite Supply-Chain Worm Hits npm Package With 150K+ Weekly Downloads
cyberpress.org · 43d ago · August 31st, 2026
A new Shai-Hulud supply-chain campaign, tracked as Trinitite, has compromised the npm package @7nohe/openapi-react-query-codegen , which receives more than 150,000 weekly downloads. The malicious versions use a hidden binding.gyp execution path and a large obfuscated JavaScript loader to infect developer machines and CI environments. The campaign appears linked to the previously reported Shai-Hulud “Mini” worm family, including the Here We Go Again, May 19, and Miasma waves. Researchers said the latest operation uses the same core malware capabilities but changes its publishing method, campaign strings, encryption keys, and install-time execution technique. The compromised package release workflow reportedly accepted a pull-request comment containing npm publish as a publishing trigger. It then checked out the pull request and published the package through GitHub Actions OpenID Connect (OIDC), without confirming that the commenter was a maintainer. This allowed attacker-controlled code to receive a valid trusted-publishing token. As a result, the malicious versions show legitimate npm provenance, although the provenance only proves that the repository’s automated publishing workflow ran not that the published code was safe. The attackers first released two prerelease versions. One of them included a preinstall command that installed Bun and attempted to execute a missing file named is_it_this_simple.js . It did not contain the full worm, but its environment variables already
-
update from malware.news
GitHub Dismissed Security Reports on Design Flaws Now Exploited by Shai-Hulud Supply-Chain Worm
malware.news · 118d ago · June 18th, 2026
Deep Specter Research submitted two formal vulnerability reports to GitHub's HackerOne disclosure channel identifying design flaws in the GitHub platform that they say are enabling variants of the Shai-Hulud/Miasma supply-chain worm. GitHub closed both reports without action. The researchers now say those same flaws are being actively exploited to compromise packages and developer accounts globally. This echoes a pattern where platform-level vulnerabilities in code hosting and CI/CD infrastructure are enabling the next generation of software supply chain attacks faster than the industry patches for them.
-
update from gbhackers.com
Shai-Hulud Trinitite Worm Infects Popular TanStack Query npm Package to Steal Developer Secrets
gbhackers.com · 43d ago · August 31st, 2026
The malicious releases deploy an evolved Mini Shai-Hulud worm designed to steal developer, cloud, CI/CD, package-registry, Kubernetes, Vault, and source-control credentials before using recovered access to spread through additional packages. While […] The post Shai-Hulud Trinitite Worm Infects Popular TanStack Query npm Package to Steal Developer Secrets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
-
update from www.aikido.dev
(aikido.dev) Compromised Tensorlake npm Package Distributes Shai-Hulud Worm in Novel Supply Chain Attack In brief - This article describes a
www.aikido.dev · 6d ago · October 8th, 2026
(aikido.dev) Compromised Tensorlake npm Package Distributes Shai-Hulud Worm in Novel Supply Chain Attack In brief - This article describes a
via Mastodon https://www.aikido.dev/blog/tensorlake-npm-package-compromised
-
update from gbhackers.com
Hackers Hijack Tensorlake Package to Spread Shai-Hulud Supply Chain Malware
gbhackers.com · 5d ago · October 8th, 2026
A threat actor published a malicious version of the tensorlake npm package on October 8, 2026, embedding a new variant of the self-replicating Shai-Hulud supply-chain worm. The compromised release, tensorlake version 0.5.144, can steal developer secrets, target browser-stored cryptocurrency credentials, and use stolen publishing credentials to spread through connected software supply chains.