Here's our coverage of the current ongoing keyv/cacheable NPM attack. We've included a list of known Ethereum RPC endpoints as indicators, since the malware looks up second stage data from that blockchain.
discourse.ifin.netwo...
#ThreatIntel #ThreatIntelligence #IFIN
discourse.ifin.network
Not-So-Mini Mini Shai-Hulud Attack Hits 400+ NPM Packages
Last Updated: 2026-08-04T18:28:08Z (UTC) What’s Happening Starting on the morning of 2026-08-04T07:00:00Z (UTC), multiple npm packages were impacted by a new worming package payload. The initial compromise of 11 packages appears to have wormed to at least 424, per Step Security. OpenSourceMalware and Socket are also covering the attack. Step provides differentiating context for this attack from prior ones: What sets this attack apart from the axios compromise of March 2026 is that ...
1 1 4
