ChainDrop / Mini Shai-Hulud npm Supply Chain Worm (August 2026)
Last changed 2026-10-27 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score did not change. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·5pyhc2…UJy8Summary
ChainDrop is a self-propagating npm supply-chain worm detected on August 4, 2026, classified as the largest wave of the Shai-Hulud (Mini Shai-Hulud) malware family. After the GitHub account of keyv and cacheable maintainer Jared Wray (jaredwray) was compromised, a two-stage credential harvester was injected into 11 core packages and then spread itself to more than 400 further npm packages and over 2,200 versions, representing roughly two billion combined monthly downloads. The payload steals cloud, CI/CD, AI-tool and cryptocurrency wallet credentials and resolves its command-and-control domain through an Ethereum smart contract (EtherHiding); several vendors attribute it to the TeamPCP group, although Palo Alto Networks Unit 42 says it cannot confirm that attribution.
Connected Entities
12 entities · 60 linked investigations- ChainDrop / Mini Shai-Hulud npm Supply Chain Worm (August 2026)→mentioned with→Monero(70%)
- ChainDrop / Mini Shai-Hulud npm Supply Chain Worm (August 2026)→mentioned with→Solana(60%)
- ChainDrop / Mini Shai-Hulud npm Supply Chain Worm (August 2026)→mentioned with→Ethereum(80%)
- Ethereum→mentioned with→Bitcoin(60%)
- Electrum→mentioned with→Bitcoin(80%)
- Monero→mentioned with→Bitcoin(60%)
- Litecoin→mentioned with→Bitcoin(70%)
- Litecoin→mentioned with→Monero(65%)
- keyv / cacheable npm Supply Chain Attack — TeamPCP Mini Shai-Hulud (August 2026)→mentioned with→Ethereum(80%)
- keyv / cacheable npm Supply Chain Attack — TeamPCP Mini Shai-Hulud (August 2026)→mentioned with→Terraform Labs(60%)
- + 16 more
Timeline(27 events)
September 2025
Original Shai-Hulud worm debuts, marking the start of the systematic npm/PyPI supply-chain campaign series.
Tenable Mini Shai-Hulud FAQNovember 2025
TeamPCP threat group first observed conducting cloud-native cryptomining and credential theft campaigns.
Pluto Security - TeamPCP: The supply chain attack story so far9 December 2025
Microsoft Security Research publishes Shai-Hulud 2.0 guidance documenting an earlier wave of the campaign.
Microsoft Security BlogMarch 2026
TeamPCP force-pushes 76 of 77 Trivy GitHub Action tags with the SANDCLOCK credential stealer; CanisterWorm infects 66+ npm packages using ICP blockchain C2.
Palo Alto Unit 42 - Weaponizing the ProtectorsApril 2026
Mini Shai-Hulud (fourth generation) begins operations according to Tenable, introducing SLSA provenance forgery, OIDC token extraction from runner memory and AI-agent persistence hooks.
Tenable Mini Shai-Hulud FAQ2 April 2026
CERT-EU attributes the breach of the European Commission's AWS environment to TeamPCP.
Pluto Security - TeamPCP: The supply chain attack story so farMay 2026
A Mini Shai-Hulud resurgence is identified compromising over 170 npm packages and two PyPI packages across 404 malicious versions.
SafeDep / Microsoft Security Research11 May 2026
TanStack attack: 84 malicious versions across 42 @tanstack/* packages published in about six minutes via OIDC token theft; CVE-2026-45321 (CVSS 9.6) assigned.
StepSecurity - TeamPCP Mini Shai-Hulud TanStack12 May 2026
TeamPCP open-sources the Shai-Hulud worm under an MIT License ('Shai-Hulud: Open Sourcing The Carnage' per Akamai; 'A Gift From TeamPCP' per Pluto Security) and announces a $1,000 contest for the largest supply-chain attack using the code.
Akamai - Mini Shai-Hulud: The Worm Returns and Goes Public19 May 2026
@antv ecosystem attack: 639 malicious versions across 323 packages published in under 30 minutes via a stolen maintainer account; Socket detects most within 6.7 minutes.
SafeDep - Mini Shai-Hulud Strikes Again22 May 2026
ChainDrop C2 infrastructure deployed; C2 domain npm-cache[.]com registered.
Palo Alto Networks Unit 42June 2026
Shai-Hulud variant infects Red Hat npm packages downloaded approximately 80,000 times per week.
The RegisterAugust 2026
Wiz, Palo Alto Networks Unit 42, StepSecurity, Expel and other firms publish independent analyses with IOCs and remediation guidance.
Wiz Blog / Unit 42 / StepSecurityAugust 2026
Cyber Security Agency of Singapore issues Advisory AD-2026-009 on the attack affecting keyv and related packages.
Cyber Security Agency of Singapore4 August 2026
09:02:37 UTC: attacker uses the compromised jaredwray GitHub account to push poisoned commit ee2681a to the keyv monorepo, injecting setup.mjs and Math_Symbol.js.
StepSecurity - ChainDrop npm Worm4 August 2026
09:04 UTC: GitHub Actions bot commits add .claude/settings.json and .vscode/tasks.json IDE persistence hooks to repository branches.
Datadog Security Labs4 August 2026
09:35 UTC: keyv@6.0.0 published via OIDC trusted publishing with a valid SLSA attestation; Socket's scanner flags it about 5 minutes 18 seconds later.
Snyk - Inside the keyv npm Supply Chain CompromiseAugust 2026
09:38 UTC onward: automated second-wave propagation using harvested npm credentials spreads to @servicetitan, @onereach, @or-sdk, @ornikar and other namespaces; by 13:20 UTC, 444 packages and 2,212 versions compromised (Elastic).
Elastic Security Labs4 August 2026
10:06-10:28 UTC: nine additional Cacheable-family packages and ecto@5.0.1 published in rapid succession.
Datadog Security LabsAugust 2026
10:18-10:20 UTC: public warnings spread; 10:39 UTC: npm begins unpublishing affected versions (cleanup substantially complete by 18:10 UTC); Elastic reports the campaign at about 5:39 AM EST; clean versions restored as 'latest' for at least nine packages by 17:40 IST.
StepSecurity / The Hacker News4 August 2026
Attackers rotate C2 endpoints via an Ethereum transaction on contract 0xE1f2395ee43e45A1556EC6438a88c31B83493103, adding awqhnjewqjkl[.]icu without modifying deployed malware.
Palo Alto Networks Unit 424 August 2026
Microsoft Security Blog publishes primary technical analysis by Ravikant Tiwari, Sagar Patil and Suriyaraj Natarajan.
Microsoft Security Blog4 August 2026
Jared Wray confirms via X that his GitHub account was compromised, reports using OIDC with npm and one-time codes, and says he regained access at about 20:00 UTC.
BleepingComputerAugust 2026
Researchers report total impact of 444+ packages and 1,381-2,234 poisoned versions, with over two billion monthly installs exposed.
Aikido SecurityDecision Log
- slot 462186378 · hash DEubrSKsjL6Jb1u7CCnZ7dW9aiED54yn7DireDjWhZLB
- slot 462186373 · hash 5So4rzDAp6geAFU4LBVKmg3SiJ2y4ez5AJegJa5oVFnQ
- slot 457658295 · hash 93XS2HyBncPv3q9oWvRaA5ui59sdMCgcUDphHC8RkrsB
- slot 443505840 · hash HdChLYaj3MB1hTjb4JACGrK4WbmHpUffTjLjbA1iF9TL
- slot 443505715 · hash EJq1RvYAgLLDxoXsysqZF4GgAWJwha3FLJF1Bo9KYmyq
- slot 443504476 · hash 99w2fB6zyqQq1ZGtgViN5TqBgti1TwRyY1o1W8o8j7hN
This investigation is cryptographically anchored to the Solana blockchain (6 decisions). 60 of 60 cited source URLs have an Internet Archive snapshot.
model: claude-code-merge-writer
generated: 8/6/2026, 11:42:00 PM
last updated: 10/27/2026, 7:18:30 PM
7 viewsavoid.net — verified advice for a post-truth world