SYMBOLCOMMON_NAMEaka. SYNONYMS
js.shai_hulud (Back to overview)

Shai-Hulud


A Javascript-based worm propagating through GitHub repositories and exfiltrating tokens and other credentials.

References
2025-09-16Wiz.ioBarak Sharoni, Merav Bar, Rami McCarthy
Shai-Hulud: Ongoing Package Supply Chain Worm Delivering Data-Stealing Malware
Shai-Hulud

There is no Yara-Signature yet.