Shai-Hulud strikes again: Keyv compromised in new npm supply chain campaign affecting at least 868 packages with 2 billion monthly installs Attackers used valid access to push malicious commits directly to the main branch, dropping poisoned versions with legitimate GitHub Actions provenance, Aikido Security said This article explores hulud worm compromised. . 604M installs of keyv 580M installs of flat-cache 571M installs of file-entry-cache 137M installs of cacheable Shai-Hulud’s worm compromised multiple caching utilities including cacheable, flat-cache, file-entry-cache, and others.
This footprint firmly puts Shai-Hulud in the “ecosystem-level incident” camp, with ripple effects beyond build systems and CLI tooling, even backend dependencies indirectly reliant on caching layers.
We can already see secondary infections in community telemetry for packages maintained by big companies like @deliveroo/reevent 1.0.1, @or-sdk/invitations 1.4.9, @picsart/ai-sdk 3.32.2, @qlik/embed-runtime 1.6.4, and picasso.js 2.11.6 Math_Symbol.js scans for AWS credentials from local files, environment variables, EC2 and ECS metadata, and AWS Secrets Manager; uses Kubernetes service account tokens to enumerate cluster secrets; aggressively pulls HashiCorp Vault tokens from multiple places before dumping all KV secrets. The payload also searches for Stripe and Slack tokens, SSH keys, cloud storage keys, database connection strings, Terraform state, Docker registry credentials, KeePass databases, VPN configs and IDE configs with platform aware globbing and regex skipping large files for maximum coverage. Speed up your security response time with monitor data in browser with ANY.RUN
