cyber.hendryadrian.com
YouTube · Hak5

Mini Shai Hulud Worm Combines Supply-Chain Attacks With Destructive Payloads

· 12:35 · Watch on YouTube ↗

Summary

ThreatWire covers malicious package publishing, the mini Shai Hulud worm’s token-triggered and geographic kill switches, a reported Nginx flaw, and Apple’s planned RCS encryption support.

Key points

  • A coordinated spam-publishing attack flooded RubyGems with more than 500 malicious packages. RubyGems removed them, disabled new account registration, and later added rate limiting and WAF protection.
  • A maintainer said the RubyGems attack targeted the registry itself, with XSS and data exfiltration, rather than end users.
  • The mini Shai Hulud incident compromised 84 versions across 42 TanStack npm packages; Accudo Security reported 373 affected packages across 169 namespaces.
  • The worm reportedly stole an OIDC token from a GitHub Actions runner through cache poisoning. The transcript says NPM tokens were not stolen and the NPM publish workflow was not compromised.
  • The payload monitors stolen GitHub tokens and can run rm -rf after detecting revocation. Another component checks system location and may play audio before deleting the system.
  • Team PCP and Breach Forums reportedly offered $1,000 in cryptocurrency for the largest supply-chain attack using the worm. Two OpenAI employees were also reported to have had it on their systems, prompting signing-certificate updates for products.
  • The roundup reports that CVE-2026-42945, called Nginx Rift, could allow RCE or DoS through crafted requests. It also says Apple plans RCS end-to-end encryption in iOS 26.5, subject to carrier and Google Messages support.

Article Details

Topics
  • [00:32] RubyGems spam publishing attack and registry response
  • [03:12] Mini Shai Hulud compromises TanStack and other package namespaces
  • [05:00] Token-triggered and geographic destructive kill switches
  • [06:44] Worm open-sourcing and supply-chain attack competition
  • [08:39] Nginx Rift vulnerability and reported RCE/DoS impact
  • [09:09] FCC change concerning updates to foreign-made routers
  • [09:21] Linux kernel security-bug qualification rules and stolen Grafana code
  • Apple’s planned end-to-end encryption support for RCS

MITRE ATT&CK

T1195.002 · Compromise Software Supply ChainAttackers published malicious package versions in RubyGems and npm ecosystems, compromising software dependencies.T1528 · Steal Application Access TokenThe mini Shai Hulud attack reportedly extracted an OIDC token from a GitHub Actions runner and used stolen GitHub tokens.T1543.001 · Launch AgentThe token-monitor payload reportedly established persistence through macOS launchd.T1543.002 · Systemd ServiceThe token-monitor payload reportedly established persistence through a Linux systemd user service.

Products

GitHubThe worm reportedly monitored stolen GitHub tokens and could trigger a destructive handler after detecting token revocation.NGINXThe transcript reports a vulnerability called Nginx Rift that could permit remote code execution or denial of service through crafted requests.npmThe mini Shai Hulud incident reportedly published malicious versions across npm packages; the transcript says NPM tokens and the publish workflow were not compromised.TanStack/routerThe attacker reportedly forked this package, pushed a malicious commit, and opened pull requests as part of the mini Shai Hulud compromise.

Related Articles