Pulse Detail — Threat Intelligence

● 0 online

ANALYZING THREAT INTELLIGENCE

PULSE NAME

The npm Threat Landscape: Attack Surface and Mitigations

WHITE TeamPCP Tr1sa111 2026-04-28 Modified: 2026-04-28

7

IOCs

LOW VOLUME

↓ CSV ↓ JSON

obfuscation worm propagation self-replicating malware credential harvesting npm packages ci/cd compromise shai-hulud github supply chain

MITRE ATT&CK & Malware Families

ATT&CK TECHNIQUES

T1132.001 T1059.007 T1036.005 T1573.001 T1497.001 T1106 T1555.003 T1552.004 T1552.001 T1087.004 T1554 T1098 T1571 T1027 T1195.002 T1567.002 T1070.004 T1564.001 T1078.004 T1102.001

MALWARE FAMILIES

Shai-Hulud

Indicators of Compromise (1 / 7 total)

All FileHash-SHA1 FileHash-SHA256 URL domain hostname

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-SHA1	bc544f455d7c06c8a1f3446160a6d9a4a8236b11	—	2026-04-28

References (2)

↗ https://unit42.paloaltonetworks.com/monitoring-npm-supply-chain-attacks/ ↗ https://unit42.paloaltonetworks.com/wp-content/uploads/2026/04/05_Malware_Category_1920x900.jpg