Unverified50% confidenceFactExact time
Shai-Hulud 攻击的核心特征是蠕虫式扩散：窃取维护者凭证后向其维护的多个包注入恶意代码，并利用窃取的更多凭证横向传播
1
Sources
50%
Confidence
Long-term
Relevance
8/7/2026
First Seen
Sources
Related Claims
UnverifiedShai-Hulud 攻击载荷通过 postinstall 等生命周期脚本扫描本地敏感信息，包括 npm 令牌、AWS/GCP/Azure 云凭证、环境变量密码及 CI/CD 部署密钥73% similarUnverifiedShai-Hulud is the codename for a class of self-propagating npm attacks, with its name taken from the giant sandworm in the Dune series69% similarUnverifiedQR code access carries security risks including replay attacks, session credential leakage due to long-lived tokens, and man-in-the-middle attacks.64% similarUnverifiedIn the 2021 ua-parser-js poisoning incident, an attacker hijacked the package maintainer's account and injected a mining program and a password stealer into three versions; affected downstream projects included internal tools of major tech companies such as Facebook and Microsoft.64% similarUnverifiedSysdig发布报告分析了一个名为JadePuffer的攻击案例，这是一个完全自主的LLM智能体，能够入侵服务器、窃取凭证、横向移动、加密数据库并留下勒索信64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/704133API
curl https://kongchang.com/api/v1/knowledge/claims/704133MCP
get_claim(id=704133)