Technology ❯ Cybersecurity ❯ Malware ❯ Supply Chain Attacks

npm Worms

Sandworm_Mode Worm Targets AI Development Toolchains

CrowdStrike says the worm steals credentials and LLM API keys, uses pacing delays, and destroys compromised environments to hide its activity

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens