Malware crew TeamPCP open-sources its Shai-Hulud worm on GitHub
· Source: theregister.com
In short
The notorious malware group TeamPCP has open-sourced its Shai-Hulud worm on GitHub, allowing other threat actors to modify and expand its capabilities. The worm targets npm packages, harvesting credentials for cloud services and publishing poisoned code to propagate itself. This move spreads malware capabilities broadly, leading to increased variants and attacks.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 20, 2026: AI-Powered Automation and Control Towers Drive Supply Chain Transformation
Tags: malware, github, cyber-crime, worm, npm, security