Record · corpus.blog/posts/01a07df5-49ee-7218-91aa-008e343ea266

"A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages

Snyk · published 29 April 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at snyk.io Wayback capture

1blogs citing

First cited: 30 Apr 2026
Most recent: 30 Apr 2026
Rank this month: not ranked
Links from this post: 53
Words captured: 3,314

Cited by

Blog

In the post

Date

opensourcemalware.com

Mini Shai-Hulud Weaponizes Tasks.JSON Files Read at the source ↗

30 Apr 2026

Links from this post

Link

Host

https://security.snyk.io/

security.snyk.io

https://api.npmjs.org/downloads/point/2026-04-22:2026-04-28/mbt

api.npmjs.org

https://github.com/search?q=%22A+Mini+Shai-Hulud+has+Appeared%22&type=repositories

github.com

https://github.com/cap-js/cds-dbs/issues/1588

github.com

https://github.com/SAP/cloud-mta-build-tool/issues/1224

github.com

https://github.com/SAP/open-ux-tools/issues/4616

github.com

https://github.com/cap-js/cds-dbs/pull/1592

github.com

https://github.com/advisories

github.com

https://osv.dev

osv.dev

Zero-day Extensive NPM Package Compromise - Shai Hulud Supply Chain Attack Read at the source ↗

snyk.io

https://security.snyk.io/shai-hulud-npm-supply-chain-attack-sep-2025

security.snyk.io

SHA1-Hulud, npm supply chain incident Read at the source ↗

snyk.io

Massive npm infection: the Shai-Hulud worm and patient zero Read at the source ↗

securelist.com

Shai Hulud 2.0, now with a wiper flavor Read at the source ↗

securelist.com

https://wikimedia.org/api/rest_v1/metrics/pageviews/per-article/en.wikipedia/all-access/all-agents/Supply_chain_attack/daily/20250101/20260429

wikimedia.org

https://www.stepsecurity.io/blog/a-mini-shai-hulud-has-appeared

stepsecurity.io

npm Supply Chain Attack via Open Source maintainer compromise Read at the source ↗

snyk.io

Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT Read at the source ↗

snyk.io

https://docs.claude.com/en/docs/claude-code/overview

docs.claude.com

https://github.com/microsoft/vscode/issues/309406

github.com

https://github.com/anthropics/claude-code/issues/49778

github.com

https://github.com/anthropics/claude-code/issues/48100

github.com

https://news.ycombinator.com/item?id=47424634

news.ycombinator.com

How “Clinejection” Turned an AI Bot into a Supply Chain Attack Read at the source ↗

snyk.io

https://www.aikido.dev/blog/mini-shai-hulud-has-appeared

aikido.dev

https://socket.dev/blog/sap-cap-npm-packages-supply-chain-attack

socket.dev

https://safedep.io/mini-shai-hulud-and-sap-compromise/

safedep.io

https://registry.npmjs.org/mbt/1.2.48

registry.npmjs.org

https://registry.npmjs.org/@cap-js/sqlite/2.2.2

registry.npmjs.org

https://registry.npmjs.org/@cap-js/postgres/2.2.2

registry.npmjs.org

https://registry.npmjs.org/@cap-js/db-service/2.10.1

registry.npmjs.org

https://github.com/search?q=OhNoWhatsGoingOnWithGitHub&type=commits

github.com

https://snyk.io/advisor/npm-package/mbt

snyk.io

https://snyk.io/advisor/npm-package/@cap-js/db-service

snyk.io

https://snyk.io/advisor/npm-package/@cap-js/sqlite

snyk.io

https://snyk.io/advisor/npm-package/@cap-js/postgres

snyk.io

https://github.com/step-security/harden-runner

github.com

https://blog.npmjs.org/post/141702881055/package-install-scripts-vulnerability

blog.npmjs.org

https://news.ycombinator.com/item?id=45263141

news.ycombinator.com

https://snyk.io/articles/npm-security-best-practices-shai-hulud-attack/

snyk.io

How to prevent malicious packages Read at the source ↗

snyk.io

https://news.ycombinator.com/item?id=45263347

news.ycombinator.com

https://github.com/oven-sh/bun/blob/main/src/install/default-trusted-dependencies.txt

github.com

https://github.com/oven-sh/bun/issues/28729

github.com

We should all be using dependency cooldowns Read at the source ↗

blog.yossarian.net

https://github.com/m4nbat/100_days_of_kql_2026/blob/main/day17_shai-hulud_worm_mde_mal.md

github.com

https://github.com/wiz-sec-public/wiz-research-iocs

github.com

https://github.com/gensecaihq/Shai-Hulud-2.0-Detector

github.com

https://app.snyk.io/auth/auth0/waad

app.snyk.io

https://app.snyk.io/auth/docker

app.snyk.io

https://app.snyk.io/auth/auth0/bitbucket

app.snyk.io

https://snyk.io/policies/terms-of-service/

snyk.io

https://snyk.io/policies/privacy/

snyk.io