Topic starter
02/08/2026 11:37 am
TL;DR: Shai-Hulud has resurfaced across npm and PyPI, affecting 170+ packages, 518,765,599 monthly downloads, 379 GitHub repositories with stolen credentials, and packages used by Mistral AI, OpenSearch Project, and TanStack, according to OXSecurity. The pattern shows how compromised non-human identities can turn package installs into credential theft, persistence, and destructive follow-on actions.
Editorial analysis by NHI Mgmt Group, based on content published by OXSecurity: ““Shai-Hulud, Here We Go Again”: 170+ Packages Hit Across npm & PyPi”.
By the numbers:
- Shai-Hulud now affects over 170 packages across npm and PyPI.
- OXSecurity says 379 GitHub repositories have stolen credentials from the campaign.
Key questions
Q: What breaks when malicious npm packages execute during CI/CD installs?
A: The main failure is that package installation becomes code execution inside a trusted build context.
Q: Why do stolen NHI credentials make supply chain malware so hard to contain?
A: Because the stolen credential can become both the exfiltration channel and the propagation channel.
Q: What are the signs that package credential abuse is already underway?
A: Warning signs include repeated authentication attempts, unusual requests against API key endpoints, publish actions from unfamiliar locations, and code that cycles through variants to find a valid token.
Practitioner guidance
- Block install-time execution where possible Restrict preinstall and similar lifecycle hooks in build pipelines, developer workstations and package automation paths so unreviewed code cannot execute during installation.
- Rotate and revoke exposed machine credentials Treat package registries, CI systems, GitHub tokens and environment secrets as compromised if they were present on an infected host, then rotate them in a controlled sequence.
- Hunt for attacker marker strings Search repositories and logs for the reported marker string and related repository creation patterns, then correlate findings with package install events and token use.
Bottom line: Shai-Hulud is not just another malicious package wave, it is a credential-led supply chain pattern that turns NHI compromise into propagation.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
02/08/2026 12:50 pm
Package install time has become an identity control point: Shai-Hulud shows that the real security boundary is no longer only repository review or registry trust. The dangerous moment is package execution during install, when machine credentials and developer secrets are exposed to code that has already been granted runtime access. Organisations that treat install hooks as low-risk metadata are misplacing the control boundary.
A question worth separating out:
Q: When should teams revoke package and CI tokens after a malware hit?
A: Revoke them as soon as a host with those credentials is suspected to be infected, but only after the endpoint is isolated and evidence is preserved. If the malware is designed to react to revocation, a blunt token reset can trigger destructive follow-on behaviour. Response has to sequence containment before credential invalidation.
👉 Read our full editorial: Shai-Hulud shows how npm supply chains turn NHIs into wipers