v1 → v2
Scores
trust_score0 → 0
severity_base— → —
score_modifier0 → 0
Sections
Overview and Classification
unchanged
Initial Compromise Vector → Attribution and Threat Actor
unchanged
Technical Payload and Execution Chain → Initial Compromise Vector
unchanged
Credential Harvesting and Crypto/Web3 Targeting → Payload and Execution Chain
unchanged
Ethereum Blockchain Command-and-Control Infrastructure → Credential Harvesting and Cryptocurrency Wallet Targeting
unchanged
Self-Propagation Mechanism and Scale → Ethereum Blockchain Command-and-Control (EtherHiding)
unchanged
IDE and AI Agent Persistence → Self-Propagation Mechanism
unchanged
Primary Affected Packages → Scale, Affected Packages and Organizations
unchanged
SLSA Provenance Bypass and Evasion Techniques → IDE and AI Coding Agent Persistence
unchanged
Advisory and Regulatory Response → SLSA Provenance Bypass and Evasion Techniques
unchanged
Indicators of Compromise → Detection, Registry Response and Advisories
unchanged
Remediation Guidance → Indicators of Compromise
unchanged
Prior Campaign History (Shai-Hulud / TeamPCP) → Remediation Guidance
unchanged
(section 14) → Prior Campaign History (Shai-Hulud Family)
unchanged
Timeline events
+ added2025-12-09 — (no description)
+ added2026-04-02 — (no description)
+ added2026-05 — (no description)
+ added2026-05-18 — (no description)
+ added2026-05-22 — (no description)
+ added2026-06 — (no description)
+ added2026-08 — (no description)
~ changed2025-09: “” → “”
~ changed2025-11: “” → “”
~ changed2026-03: “” → “”
~ changed2026-04: “” → “”
~ changed2026-05-11: “” → “”
~ changed2026-05-12: “” → “”
~ changed2026-05-19: “” → “”
~ changed2026-08-04: “” → “”
Accepted submissions
No changes to accepted submissions.
Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.
v1 hash: 15c0c3fb95ad0b1c66455bcb7de849d0e94b67dc7cb248e5488e064341df5734
v2 hash: 6538780dbba01570d4751455a3162b16244c9c2322c2bf179033dacd280ae7e8