v2 → v3
Scores
trust_score0 → 0
severity_base— → —
score_modifier0 → -10
Sections
Overview and Classification
unchanged
Attribution and Threat Actor
unchanged
Initial Compromise Vector
unchanged
Payload and Execution Chain
unchanged
Credential Harvesting and Cryptocurrency Wallet Targeting
unchanged
Ethereum Blockchain Command-and-Control (EtherHiding)
unchanged
Self-Propagation Mechanism
unchanged
Scale, Affected Packages and Organizations
unchanged
IDE and AI Coding Agent Persistence
unchanged
SLSA Provenance Bypass and Evasion Techniques
unchanged
Detection, Registry Response and Advisories
unchanged
Indicators of Compromise
unchanged
Remediation Guidance
unchanged
Prior Campaign History (Shai-Hulud Family)
unchanged
Timeline events
No timeline changes.
Accepted submissions
No changes to accepted submissions.
Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.
v2 hash: 6538780dbba01570d4751455a3162b16244c9c2322c2bf179033dacd280ae7e8
v3 hash: 1f075016eaa0a7f80024c1022469022f4e092c00184dd13bb3bdcdbbe156b394