Skip to main content

Briefing Zero-days CVEs IOCs NewsActors Vendors Licenses Help

⌘+KWorkspace→

Real-time security intelligence — KEV, CVEs, exploits, threat actors and IOCs unified into one live view.

Sources Status API docs RSS feeds Licenses Help Security disclosure

© 2026 ZeroDayAttack · Public data from CISA · NIST · MITRE · FIRST · OSV · GitHub · abuse.ch — not a security advisory.

Built by Kiril Urbonas

ZeroDayAttack — AppSec intelligence aggregator

Search

81 results

For "Shai-Hulud" across CVEs, vendor advisories, threat actors, IOCs, security research, and news. Also searching: npm, supply chain, tinycolor

All81 Vulnerabilities5 Threat actors0 Vendor advisories0 Research50 News23 IOCs3

Instant answer

shai-hulud

npm self-replicating supply-chain worm targeting popular packages, Sept-Oct 2025+.

Search "npm"Search "supply chain"Search "tinycolor"Search "self-replicating worm"

Vulnerabilities

5

OSV-MAL-2026-5314—2026-06-09
Malicious code in embiggen (PyPI)
OSV-MAL-2026-5316—2026-06-09
Malicious code in gpsea (PyPI)
OSV-MAL-2026-5324—2026-06-09
Malicious code in pyphetools (PyPI)
OSV-MAL-2026-5322—2026-06-09
Malicious code in phenopacket-store-toolkit (PyPI)

OSV-MAL-2026-5323—2026-06-09

Malicious code in ppkt2synergy (PyPI)