Technology ❯ Cybersecurity ❯ Threat Analysis

Vulnerabilities

Credential Theft CVE-2025-10585 Exploitation Techniques Access Management Malicious Software Attack Vectors Access Tokens CVE-2025-8088 Defense Mechanisms Exploits

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

Stolen maintainer credentials let the worm ship install-time stealers that raid developer and CI secrets.

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens