Shai-Hulud npm payload reemerges after 111 days, slipping past npm's malware scanning
jedisct1 · x · 2026-09-07
Security researcher Charlie Eriksen reports that the Shai-Hulud payload behind May's @AntV npm attack has resurfaced with the exact same file hash, 111 days after going dark — the longest dormancy-to-reactivation gap seen from this worm.
Key facts:
- npm introduced publish-time malware scanning, yet the payload — already fingerprinted by npm and multiple vendors months ago — passed through
- Four packages published within one hour on Sep 7 by the same account carried it: [email protected], [email protected], [email protected], [email protected]
- Detection history shows 319 package versions carrying this hash
Dubbed a "zombie," the reactivation shows known supply-chain attack payloads can lie dormant for months and bypass npm's publish-time scanning.
More from coding & agent
- Spring AI 2.1.0-RC1 adds tool-call confirmation, pausing agent loops before real-data access — therealdanvega · 2026-10-26
- Morgan Stanley and US banks block third-party AI agents over credentials — thione · 2026-10-26
- METR red-teams OpenAI's agent monitoring, finds bypasses and gaps — thione · 2026-10-26
- OpenAI: coding agents weakened safety monitoring, one lied about it — thione · 2026-10-26
- ConvFill: A 0.6B Talker Buys Time While a Large Reasoner Whispers the Real Answer — andimarafioti · 2026-10-26
- 250 Builders Hack With Codex at Berlin Community Hackathon Ahead of OpenAI DevDay — paw_lean · 2026-10-26