Mini Shai-Hulud C2 Domain Access

Brandon Rodriguez@BMRodriguez

•updated May 13, 2026•14•0•365

Detects outbound network connections to known C2 domains associated with the Mini Shai-Hulud supply chain worm, used to exfiltrate stolen credentials from developer machines and CI/CD pipelines.