Tool
AI Package Analyst
- First Reported
- Apr 23, 2026
- Latest Reported
- May 14, 2026
Reported Context (3)
- not responsible for any prior release of the package. This incident was detected by StepSecurity AI Package Analyst. StepSecurity Details Malicious node-ipc Releases Targeting Developer Credentials
- StepSecurity’s AI Package Analyst monitors every new npm publish in real time, diffing each release against the full version history. For [email protected], four signals triggered an immediate CRITICAL verdict Step Security Reports Shai-Hulud Worm in Hijacked Intercom npm Package, Targeting Cloud Credentials
- to audit.checkmarx.cx during a controlled test run, stopping exfiltration at the network layer. The AI Package Analyst flagged the anomalous preinstall hook and Bun runtime download immediately upon publish. Malicious Bitwarden CLI npm Release Targets Developer Credentials and GitHub Actions
Malware (1)
Threat Actors (1)
MITRE ATT&CK (23)
Vendors (9)
Products (18)
Tools (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.