Malware
Sha1-Hulud: The Second Coming
- First Reported
- Jul 6, 2026
- Latest Reported
- Jul 6, 2026
Reported Context (1)
- have learned that github.com itself makes an excellent exfiltration destination. When Sha1-Hulud: The Second Coming hit the npm ecosystem in November 2025, the worm exfiltrated stolen credentials as JSON blobs GitHub Expands Enterprise Secret Scanning to Public Content, but Gaps Remain
Threat Actors (1)
MITRE ATT&CK (1)
Vendors (2)
Products (5)
Tools (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.