According to SlowMist monitoring, the npm worm named "Mini Shai-Hulud" spreads through projects such as TanStack and UiPath, hijacking GitHub credentials to publish malicious packages and steal CI/CD keys, cloud service credentials, and cryptocurrency wallet information. SlowMist recommends affected projects inspect the router_init.js file, rotate exposed credentials, and monitor for suspicious activity.
SlowMist Detects High-Risk npm Worm Stealing Crypto Information
AiCoinShare
Summary
SlowMist has uncovered a high-risk npm worm named 'Mini Shai-Hulud' spreading through projects such as TanStack and UiPath. The worm steals CI/CD keys, cloud service credentials, and encrypted wallet data by compromising GitHub accounts. Crypto news reports that the worm publishes malicious packages to npm. Affected projects should inspect the router_init.js file, rotate exposed credentials, and monitor for unusual activity. Crypto Today underscores the urgent need for credential security within the DevOps pipeline.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.