Backdoored Cemu release linked to TanStack and Mistral supply chain campaign

TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack

Postmortem: TanStack npm supply-chain compromise via GitHub Actions exploitation

On May 11, 2026, an attacker exploited a chain of vulnerabilities — including the pull_request_target "Pwn Request" pattern, GitHub Actions

Red Hat npm packages compromised in Miasma supply chain attack exposing developer credentials

Security researchers at Wiz have identified a campaign called Miasma, the latest evolution of the Shai-Hulud malware family, targeting npm s

Bitwarden CLI 2026.4.0 Compromised in Checkmarx Supply Chain Attack via GitHub Action

Socket researchers discovered that Bitwarden CLI version 2026.4.0 was compromised as part of the ongoing Checkmarx supply chain campaign. Th

Malicious 'Miasma' Framework Compromises 32 Red Hat npm Packages in Supply Chain Attack

A malicious open-source framework called 'Miasma' (a Shai-Hulud clone) compromised 32 Red Hat npm packages. GitHub removed the repository, b

Supply Chain Attack Wave Targets npm Packages and Go Ecosystem via Mini Shai-Hulud Malware Family

Socket Threat Research is tracking a new supply chain attack wave linked to the Mini Shai-Hulud, Miasma, and Hades malware family. The campa