Executive Summary
The Socket Threat Research Team has identified an ongoing supply chain attack attributed to the Mini Shai-Hulud threat group. The attack targeted the npm package `@7nohe/openapi-react-query-codegen`, resulting in ten malicious versions being published with valid npm provenance attestations. The compromise was achieved by exploiting a comment-triggered GitHub Actions publishing workflow that failed to verify the repository association of commenters, allowing unauthorized accounts to trigger builds from malicious forks.
Technically, the malware employs an obfuscated JavaScript loader that executes an AES-128-GCM encrypted second-stage payload. This payload is highly sophisticated, featuring capabilities for credential harvesting (AWS, Azure, GCP, npm, GitHub, PyPI), process memory scanning, and self-propagation via SSH and package poisoning. Notably, the campaign targets AI-related developer configurations like Claude and Copilot for persistence.
The impact is significant given the package's 50,000 weekly downloads and the fact that the `latest` tag was compromised. Affected organizations face potential full-scale credential exposure and lateral movement within CI/CD pipelines and cloud environments. Immediate rotation of all accessible secrets is required for any environment where the malicious versions were installed.