CTT Report Hub on Telegram: “#ParsedReport #CompletenessLow 07-09-2026 Shai-H…”

CTT Report Hub @aptreports · 3.52K subscribers

Post #32186 34 Sep 7, 2026, 17:16 UTC

#ParsedReport #CompletenessLow
07-09-2026

Shai-Hulud Rises From the Dead after 111 days

https://www.aikido.dev/blog/shai-hulud-npm-resurfaces

Report completeness: Low

Threats:
Shai-hulud
Supply_chain_technique

Victims:
Antv, Npm

TTPs:
Tactics: 1
Technics: 0

ChatGPT TTPs:
do not use without manual check
T1078, T1195.001

IOCs:
Hash: 1
Domain: 1
File: 1
IP: 0
Url: 0
Email: 0
BrowserExtension: 0

Algorithms:
sha256

www.aikido.dev A Shai-Hulud npm payload came back 111 days later A known Shai-Hulud worm payload sat dormant for 111 days, then republished to npm, right past the malware scanning meant to catch it.

Open in Telegram All posts from @aptreports