TGViewer
CTT Report Hub CTT Report Hub @aptreports · 3.52K subscribers
Post #31978 25
#ParsedReport #CompletenessLow
29-08-2026

Shai-Hulud – Trinitite: Sponsored by Preview 2 Effects

https://www.ox.security/blog/shai-hulud-trinitite-sponsored-by-preview-2-effects/

Report completeness: Low

Actors/Campaigns:
Teampcp

Threats:
Shai-hulud
Trinitite

Victims:
Software developers, Npm package ecosystem, Github repositories

Geo:
Australia

TTPs:
Tactics: 2
Technics: 0

ChatGPT TTPs:
do not use without manual check
T1027, T1059.007, T1140, T1195.001, T1567.001

IOCs:
Domain: 1
Coin: 1

Soft:
TanStack, ClaudeCode, anthropic

Algorithms:
xor, aes

Functions:
eval

Links:
https://github.com/search?q=%22Trinitite%3A+Sponsored+by+Preview+2+Effects%22&type=repositories
OX Security Shai-Hulud – Trinitite: Sponsored by Preview 2 Effects - OX Security TeamPCP went to jail, but the spirit of Shai-Hulud lives on: @7nohe/openapi-react-query-codegen was compromised, 128k weekly downloads affected Overview Less than 24h of TeamPCP’s creators arrest in Australia, a new Shai-Hulud malware variant hits npm, specifically…
More from @aptreports
  1. Oct 14, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  2. Oct 14, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  3. Oct 14, 2026#ParsedReport #CompletenessHigh 13-10-2026 MALFEX Moves Its npm Loader into a Native Windo…
  4. Oct 14, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  5. Oct 14, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  6. Oct 14, 2026#ParsedReport #CompletenessLow 13-10-2026 RSVP to Disaster: How One Click Installs a RAT h…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →