29-08-2026
Shai-Hulud – Trinitite: Sponsored by Preview 2 Effects
https://www.ox.security/blog/shai-hulud-trinitite-sponsored-by-preview-2-effects/
Report completeness: Low
Actors/Campaigns:
Teampcp
Threats:
Shai-hulud
Trinitite
Victims:
Software developers, Npm package ecosystem, Github repositories
Geo:
Australia
TTPs:
Tactics: 2
Technics: 0
ChatGPT TTPs:
do not use without manual checkT1027, T1059.007, T1140, T1195.001, T1567.001
IOCs:
Domain: 1
Coin: 1
Soft:
TanStack, ClaudeCode, anthropic
Algorithms:
xor, aes
Functions:
eval
Links:
https://github.com/search?q=%22Trinitite%3A+Sponsored+by+Preview+2+Effects%22&type=repositories