Record · corpus.blog/posts/01a07df5-49ee-7218-91aa-008e2a5c378f

Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp

Snyk · published 4 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at snyk.io Wayback capture

1blogs citing

First cited: 26 Jun 2026
Most recent: 26 Jun 2026
Rank this month: not ranked
Links from this post: 25
Words captured: 2,776

Cited by

Blog

In the post

Date

johnsy.com

mise, aube, et cetera... Read at the source ↗

26 Jun 2026

Links from this post

Link

Host

https://security.snyk.io/node-gyp-supply-chain-compromise-june-2026

security.snyk.io

https://security.snyk.io/package/npm/@vapi-ai%2Fserver-sdk

security.snyk.io

https://api.npmjs.org/downloads/point/last-week/@vapi-ai%2Fserver-sdk

api.npmjs.org

https://security.snyk.io/package/npm/ai-sdk-ollama

security.snyk.io

https://api.npmjs.org/downloads/point/last-week/ai-sdk-ollama

api.npmjs.org

https://security.snyk.io/package/npm/autotel

security.snyk.io

https://api.npmjs.org/downloads/point/last-week/autotel

api.npmjs.org

https://security.snyk.io/package/npm/awaitly

security.snyk.io

https://api.npmjs.org/downloads/point/last-week/awaitly

api.npmjs.org

Maintainers of ESLint Prettier Plugin Attacked via npm Supply Chain Malware Read at the source ↗

snyk.io

https://bun.sh

bun.sh

https://github.com/liuende501

github.com

https://api.github.com/users/liuende501

api.github.com

TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack Read at the source ↗

snyk.io

https://security.snyk.io

security.snyk.io

https://snyk.io/

snyk.io

NPM security: preventing supply chain attacks Read at the source ↗

snyk.io

Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages Read at the source ↗

snyk.io

Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account Read at the source ↗

snyk.io

"A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages Read at the source ↗

snyk.io

SHA1-Hulud, npm supply chain incident Read at the source ↗

snyk.io

npm Supply Chain Attack via Open Source maintainer compromise Read at the source ↗

snyk.io

https://www.youtube.com/watch?v=YrwM2EFYrUY

youtube.com

https://www.youtube.com/watch?v=gx5RzKrXtxQ

youtube.com

https://learn.snyk.io/lesson/compromise-of-legitimate-package/

learn.snyk.io