Mini Shai Hulud Npm Worm Activity

Ravi Asakapalli@Ravishankaraskp

•updated May 13, 2026•1•0•351

Detects multiple threat behaviors associated with the Mini Shai-Hulud supply chain worm campaign. This includes memory scraping for secrets, execution of malicious Node/Bun payloads, connection to known C2 domains, and file operations related to persistence.