Mend.io Blog

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave

Tom Abai May 12, 2026

Mini Shai-Hulud Is Back: 172 npm and PyPI Packages Compromised in Latest Wave

Filter & Search

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave - mini shai hulud is back

Mini Shai-Hulud Is Back: 172 npm and PyPI Packages Compromised in Latest Wave

Tom Abai May 12, 2026

Malicious Packages

33 malicious NPM packages target DeFi, cloud, and AI developer credentials.

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave - crn women channel 1000x650 1

Mend.io’s Stephanie Broyles Named to CRN’s 2026 Women of the Channel List

Azi Cohen May 6, 2026

Community

Mend.io CMO Stephanie Broyles named to CRN's 2026 Women of the Channel list.

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave - blog best sast solutions

Best SAST Solutions: How to Choose Between the Top 12 Tools in 2026

Tiffany Jennings May 5, 2026

SAST

Compare 12 top SAST tools of 2026 and find the right fit for your team.

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave - npm supply chain attack

PhantomRaven Wave 5: New Undocumented NPM Supply Chain Campaign Targets DeFi, Cloud, and AI Developers

Tom Abai May 3, 2026

Malicious Packages

33 malicious NPM packages target DeFi, cloud, and AI developer credentials.

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave - blog cover linux kernel lpe

CVE-2026-31431 (Copy Fail): Linux Kernel LPE

Dor Hayun Apr 30, 2026

Malicious Packages

New Linux 'copy_fail' LPE gives root on all major distros. Mitigate before patching.

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave - mini shai hulud

Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Framework

Tom Abai Apr 29, 2026

Malicious Packages

SAP CAP packages compromised via Claude Code in AI-assisted worm attack.

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave - the butlerian jihad

The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets

Tom Abai Apr 23, 2026

Malicious Packages

Mend.io tracks TeamPCP's latest supply chain attack.

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave - blog cover team pcp part 4 1

A Poisoned Xinference Package Targets AI Inference Servers

Tom Abai Apr 22, 2026

Malicious Packages

Three poisoned xinference releases on PyPI target AI infrastructure credentials.

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave - blog zero day visibility 1000x650

From Panic to Playbook: Modernizing Zero‑Day Response in AppSec

Shannon Davis Apr 21, 2026

Application Security

Learn how AppSec teams build a repeatable zero-day response workflow.

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave - sast all about static application security testing post

What Is SAST – Static Application Security Testing

Aurora Starita Apr 16, 2026

SAST

Learn about Static Application Security Testing (SAST).

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave - blog image sca tools 1

Best Software Composition Analysis (SCA) Tools: Top Solutions in 2026

Tiffany Jennings Apr 14, 2026

Software Composition Analysis

Learn what SCA tools do and how they help secure your open source dependencies.

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave - blog project glasswing 1000x650

Anthropic’s Project Glasswing: How Claude Mythos is Changing the Rules for AppSec

Shannon Davis Apr 9, 2026

Application Security

See what AI-powered offense means for your AppSec & AI Security program.

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave - docker hardened images integration

Container Security Without Context Is Just More Noise

Shannon Davis Apr 7, 2026

Container Security

Smarter container security with Docker Hardened Images.

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave - blog ai application security 1000x650

AI Application Security: 6 Focus Areas and Critical Best Practices

Tiffany Jennings Apr 2, 2026

AI Models Risk

Learn how AI application security differs from traditional AppSec.

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave - blog cover poisoned axios

Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install

Tom Abai Mar 31, 2026

Malicious Packages

See how the attack works, what to look for, and how to remediate.

Mini shai-hulud is back: 172 npm and pypi packages compromised in latest wave - blog cover team pcp part 3

Famous Telnyx Pypi Package compromised by TeamPCP

Tom Abai Mar 27, 2026

Malicious Packages

See how the attack works, what to look for, and how to remediate.

1 2 3 4 ... 37