Shai-Hulud / TeamPCP Supply Chain Attack
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·wkby7P…4mchSummary
Shai-Hulud is a self-replicating npm and PyPI supply chain worm attributed to the financially motivated threat group TeamPCP (also tracked as DeadCatx3, PCPcat, ShellForce, CipherForce and UNC6780). Active since September 2025, the campaign has compromised hundreds of packages across ecosystems including TanStack, Mistral AI, UiPath, SAP, AntV and Red Hat by harvesting CI/CD credentials, and directly enabled the December 2025 Trust Wallet Chrome extension hack in which approximately $8.5 million was stolen from 2,520 wallets. After TeamPCP open-sourced the worm in May 2026, derivative variants such as Miasma and Hades appeared; the payload targets 166 cryptocurrency browser extensions and local wallet files, creating direct theft risk for crypto developers and users.
Connected Entities
13 entities · 60 linked investigations- TanStack npm Supply Chain Attack (Mini Shai-Hulud / TeamPCP)→mentioned with→Bitcoin(70%)
- TanStack npm Supply Chain Attack (Mini Shai-Hulud / TeamPCP)→mentioned with→Ethereum(60%)
- TanStack npm Supply Chain Attack (Mini Shai-Hulud / TeamPCP)→mentioned with→Monero(60%)
- TanStack npm Supply Chain Attack (Mini Shai-Hulud / TeamPCP)→mentioned with→Electrum(60%)
- Ethereum→mentioned with→Bitcoin(60%)
- TeamPCP / Mini Shai-Hulud npm Supply Chain Worm→mentioned with→Monero(80%)
- TeamPCP / Mini Shai-Hulud npm Supply Chain Worm→mentioned with→Ethereum(65%)
- TeamPCP / Mini Shai-Hulud npm Supply Chain Worm→mentioned with→Solana(65%)
- TeamPCP / Mini Shai-Hulud npm Supply Chain Worm→mentioned with→Bitcoin(75%)
- Electrum→mentioned with→Bitcoin(80%)
- + 27 more
1 submission awaiting moderator review.
Timeline(23 events)
September 2025
Original Shai-Hulud worm first detected in the npm ecosystem; earliest attributable TeamPCP supply chain operations begin. 500+ packages compromised via malicious preinstall hooks; credentials harvested from 25,000+ GitHub repositories.
Unit 42 / SecurityWeekNovember 2025
Shai-Hulud 2.0 peak activity: 640+ npm packages infected within days; 25,000+ data-leaking GitHub repositories created; Zapier, PostHog, and Postman developer tooling among affected parties.
SecurityWeekDecember 2025
Attacker registers domain metrics-trustwallet[.]com in preparation for the Trust Wallet extension compromise.
SlowMist Christmas Heist AnalysisDecember 2025
Microsoft Security Blog publishes formal Shai-Hulud 2.0 detection, investigation, and defense guidance.
Microsoft Security BlogDecember 2025
Malicious Trust Wallet Chrome extension v2.68 published at about 12:32 PM UTC using a stolen Chrome Web Store API key; wallet mnemonic harvesting begins.
Trust Wallet official incident updateDecember 2025
Security researchers publicly report wallet drains; Trust Wallet acknowledges the incident.
The Hacker NewsDecember 2025
Trust Wallet exfiltration window closes at 11:00 UTC; clean version 2.69 released and reimbursement process initiated. Losses reported at more than $7 million by CoinDesk and approximately $8.5 million across 2,520 wallets in later reporting.
CoinDeskDecember 2025
Shai-Hulud 3.0 'The Golden Path' variant discovered by researcher Charlie Eriksen propagating via @vietmoney/react-big-calendar@0.26.2; dead-man's switch absent from this variant.
SnykApril 2026
Bitwarden CLI @bitwarden/cli@2026.4.0 compromised for approximately 93 minutes via a backdoored Checkmarx GitHub Actions workflow; 334 downloads of the malicious version; payload embedded the string 'Shai-Hulud: The Third Coming'.
The Hacker NewsApril 2026
The Register reports an npm supply chain worm attack attributed to TeamPCP activity.
The RegisterApril 2026
Mini Shai-Hulud targets the SAP CAP ecosystem: @cap-js/sqlite, @cap-js/postgres, @cap-js/db-service, and mbt compromised (~570,000 combined weekly downloads).
Dark ReadingMay 2026
Mini Shai-Hulud Wave 2 begins at 19:20 UTC: 84 malicious @tanstack package versions published in six minutes via a GitHub Actions pwn request, cache poisoning and OIDC token extraction. The worm spreads to 172 packages and 400+ malicious versions across npm and PyPI (within five hours per Orca Security; within 48 hours per other reporting). Two OpenAI employee devices compromised. CVE-2026-45321 (CVSS 9.6) assigned.
StepSecurity / Orca SecurityMay 2026
TeamPCP publishes the Shai-Hulud worm source code on GitHub under MIT License ('Open Sourcing The Carnage') alongside BreachForums posts encouraging independent campaigns; copycat forks appear within hours. Orca Security discloses 169 npm and 2 PyPI affected packages.
The Register / Orca SecurityMay 2026
GitHub employee installs trojanized Nx Console VS Code extension (2.2 million installs, verified publisher), live for about 11 minutes; TeamPCP allegedly exfiltrates approximately 3,800 GitHub internal repositories.
Phoenix SecurityMay 2026
Mini Shai-Hulud Wave 3: compromised @antv / atool maintainer account used to publish 639 malicious versions across 323 packages (including AntV, jest-canvas-mock, echarts-for-react) in ~22 minutes (~16 million weekly downloads).
Snyk / Wiz / Phoenix SecurityJune 2026
Miasma variant deployed against the @redhat-cloud-services npm namespace via a compromised Red Hat employee GitHub account: 96 malicious versions across 32 packages in two waves (10:53 UTC and 13:44-13:46 UTC); assessed as a Shai-Hulud derivative by Unit 42 and SANS ISC.
Wiz / Aikido Security / Unit 42June 2026
At least 57 npm packages and 300+ malicious versions identified under the Miasma/Hades umbrella; more than 471 malicious artifacts across ecosystems documented.
SecurityWeekJune 2026
Hades PyPI variant second wave: at least 29 additional PyPI packages compromised, targeting bioinformatics, graph ML, and MCP-themed packages.
SecurityWeekJune 2026
OpenAI deadline for users to update ChatGPT Desktop, Codex App, Codex CLI, and Atlas to versions signed with new certificates; old code-signing certificates revoked.
OpenAIJune 2026
141 Mastra AI npm packages (~8 million combined weekly downloads) compromised in a 45-minute window via the typosquat dependency easy-day-js; Microsoft attributes the attack to the North Korean group Sapphire Sleet (BlueNoroff).
Microsoft Security Blog / SecurityWeekDecision Log
- slot 457541372 · hash Gxfu3o417VfgHNmDnnsLoMxF5yefAJvpHR9TuYV27MnD
- slot 426522805 · hash E8mWf23s6zxgKH1izbmsUCqFaPFvF4MwWUSAEGLsCSH1
- slot 426522802 · hash 78fTfAmTRvZ9KrZKSozL3Z5QK2RDzV57pHGaHk1SKpS4
- slot 423878428 · hash BcLDNkm3DoLserLEWTzFXBGrGrJ3bCoZpXZ6nPUebgm
This investigation is cryptographically anchored to the Solana blockchain (4 decisions). 67 of 67 cited source URLs have an Internet Archive snapshot.
model: claude-code-merge-writer
generated: 6/2/2026, 8:04:17 PM
last updated: 10/2/2026, 5:25:45 AM
6 viewsavoid.net — verified advice for a post-truth world