Question 1

ما هو Mini Shai-Hulud؟

Accepted Answer

Mini Shai-Hulud is a self-replicating malware campaign attributed to a financially motivated group called TeamPCP that spreads through compromised npm packages, stealing developer credentials and using them to publish further poisoned package versions under legitimate maintainer identities.

Question 2

أي حزم npm كانت متأثرة؟

Accepted Answer

The May 19 wave compromised 317 packages and 637 versions tied to the npm account "atool," including echarts-for-react (roughly 1.1 million weekly downloads), Alibaba's @antv data visualization suite, timeago.js, and size-sensor, according to SafeDep and Socket research.

Question 3

ماذا يجب على المطورين فعله إذا قاموا بتثبيت حزمة متأثرة؟

Accepted Answer

Security researchers recommend treating the machine or CI runner as fully compromised: rotate all credentials (AWS, GitHub, npm, SSH, database), enable two-factor authentication, audit GitHub for unauthorized repositories matching the campaign's naming pattern, and remove persistent backdoors from developer tool configuration files such as `.vscode/tasks.json` and `.claude/settings.json`.

Mini Shai-Hulud

دودة Mini Shai-Hulud تخطف 323 حزمة نيم في أقل من 30 دقيقة من خلال حساب مسروق واحد

ملخص حاد وموجز.
كل يوم.

Mini Shai-Hulud

دودة Mini Shai-Hulud تخطف 323 حزمة نيم في أقل من 30 دقيقة من خلال حساب مسروق واحد

ملخص حاد وموجز.كل يوم.

ملخص حاد وموجز.
كل يوم.