PodParley PodParley
PodParley
Shai-Hulud Supply-Chain Attack: 400+ Malicious Packages Target Developer Credentials episode artwork

EPISODE · May 14, 2026 · 11 MIN

Shai-Hulud Supply-Chain Attack: 400+ Malicious Packages Target Developer Credentials

from GoYou Cybersecurity

The Shai-Hulud campaign has compromised over 400 packages across npm and PyPI, delivering credential-stealing malware to developers. The attack involves hijacking OIDC tokens and publishing malicious package versions with verifiable provenance attestation. Affected projects include TanStack, Mistral AI, Guardrails AI, UiPath, and OpenSearch.

Episode metadata supplied by the publisher feed · Published May 14, 2026

What this episode covers

The Shai-Hulud campaign has compromised over 400 packages across npm and PyPI, delivering credential-stealing malware to developers. The attack involves hijacking OIDC tokens and publishing malicious package versions with verifiable provenance attestation. Affected projects include TanStack, Mistral AI, Guardrails AI, UiPath, and OpenSearch.

PodParley-generated summary based on available episode metadata and transcript content.

NOW PLAYING

Shai-Hulud Supply-Chain Attack: 400+ Malicious Packages Target Developer Credentials

0:00 11:49

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

Share this episode

Similar Episodes

China's Cyber Crews Go Shopping: Volt Typhoon Slides Into US Power Grids While APT31 Swipes Corporate Passwords

Jun 22, 2026 ·3m

Volt Typhoon is Back and They're Coming for Your VPN: Why Beijing is Mapping US Infrastructure Like a Heist Movie

Jun 21, 2026 ·4m

Beijing's Data Plumbing Inspector and the Credential Thieves Who Never Sleep

Jun 19, 2026 ·3m

ClickFix Clicks Back: When Fake Tech Support Becomes Your Worst Nightmare and China Plays the Long Game

Jun 17, 2026 ·3m

Cloud Cracks and Backdoor Snacks: China's Dev Tool Trap Has US Defenders Sweating

Jun 15, 2026 ·3m

Guarding AI Agents: Boundaries and Safeguards

Jun 15, 2026 ·11m

Similar Podcasts

Darknet Discussions Darknet Discussions Welcome to "Darknet Discussions," the podcast that gets into the shadows of the internet to bring you the most intriguing, enlightening, and sometimes unsettling stories from the dark web. Hosted by seasoned darknet aficionados, each episode of "Darknet Discussions" explores the intricate dynamics of darknet markets, cybersecurity threats, and the digital underworld. Join us as we interview experts, discuss the latest trends in cybercrime, and shed light on the technologies that operate beneath the surface of everyday internet use. Also, we occasionally go off on a tangent about something completely unrelated. IT Trendsetters SynerComm During each episode, our team is joined by a relevant industry expert to gain insight into new IT trends and learn about important IT and cybersecurity concepts. Our goal is to give you the advice your need to safeguard your network and digital assets. IT Jobs's Podcast IT Jobs Two Cisco CCIEs discussing topics related to getting and IT Job or hiring for an IT Job. Focus on both Network Engineering, Cloud, Development, and CyberSecurity and as much reality as can be brought. The Cyber Sleuth Show Cyber Social Hub Step into the world of digital forensics, mobile forensics, OSINT, and cybersecurity with The Cyber Sleuth Show! Hosted by Kevin DeLong, this podcast dives deep into the ever-evolving landscape of digital investigations, featuring expert guests, cutting-edge tools, real-world case insights, and, of course, the occasional terrible dad joke.From law enforcement investigators and forensic analysts to OSINT specialists and cybersecurity pros, we uncover the latest trends, techniques, and challenges in the field—giving you the knowledge you need to find the truth behind digital incidents.🔍 Stay ahead of the curve. Stay informed. Stay sleuthing.📢 Join the community! Connect with fellow digital investigators for FREE at CyberSocialHub.com.🎥 Prefer video? Watch the podcast on YouTube: @CyberSocialHub.🚀 Subscribe now and sharpen your investigative skills!

Frequently Asked Questions

How long is this episode of GoYou Cybersecurity?

This episode is 11 minutes long.

When was this GoYou Cybersecurity episode published?

This episode was published on May 14, 2026.

What is this episode about?

The Shai-Hulud campaign has compromised over 400 packages across npm and PyPI, delivering credential-stealing malware to developers. The attack involves hijacking OIDC tokens and publishing malicious package versions with verifiable provenance...

Can I download this GoYou Cybersecurity episode?

Yes, you can download this episode by clicking the download button on the episode player, or subscribe to the podcast in your preferred podcast app for automatic downloads.
URL copied to clipboard!