Experts say supply chain attacks compromised SAP and Intercom npm packages, plus the PyPI package Lightning, in a campaign that calls itself Mini Shai-Hulud
The wave of supply chain attacks aimed at security and developer tools has washed up more victims, namely SAP and Intercom npm packages, plus the lightning PyPI package.
The RegisterJessica Lyons
Context & Ripple Effects
This report identifies SAP and Intercom npm packages and the Lightning PyPI package as additional targets in the Mini Shai-Hulud campaign. Related coverage subsequently connects likely campaign activity to packages associated with Mistral, UiPath and TanStack, and later to hundreds of malicious npm versions concentrated in the @antv ecosystem.
The arc matters because the reported compromise moves beyond an isolated maintainer-account incident: it suggests a campaign capable of crossing package owners, developer-tool categories and both npm and PyPI ecosystems, while attribution remains unconfirmed.
First-order effects
Teams using the named SAP, Intercom or Lightning packages must identify affected versions in their dependency trees and treat recent package updates as potential exposure until they are reviewed or replaced.
The named package publishers and registries face an immediate incident-response burden: investigate release integrity, revoke or secure compromised publishing access, and communicate remediation to downstream users.
Second-order effects
Organizations that consume open-source developer dependencies will likely tighten version pinning, provenance checks and approval processes, increasing friction for routine package updates.
Other maintainers of widely embedded npm and PyPI packages face pressure to review publisher-account security and release pipelines, especially as related reports broaden the apparent Mini Shai-Hulud footprint.
Third-order effects
If campaigns can repeatedly distribute malicious releases across major registries, software buyers will increasingly evaluate vendors and developer platforms on dependency governance, not only application security.
The pattern points toward ecosystem-level defenses—stronger publisher identity controls, release provenance and coordinated registry response—becoming core infrastructure rather than optional security practice.
The trend: This is part of the shift from attacks on individual applications to attacks on the shared package-maintenance and distribution layers that feed large numbers of software products.
If your team touches npm or PyPi - literally number 1 priority should be figuring out your playbook of defenses and response to these supply chain attacks. The threat actors aren't slowing down and they're SCREAMING their MO from the rooftops. Lock it down.
🚨 Breaking: SAP NPM Packages Breached 🚨 SAP NPM packages were hijacked to deliver the next-gen of Shai-Hulud malware, dubbed “A Mini Shai-Hulud has appeared” We found over 1,200 public repositories with stolen credentials on GitHub, showing that the attack was successful and [ima…
🚨 Popular python package lightning was compromised an hour ago. It's already quarantined by pypi. What we know so far: - Versions 2.6.2 and 2.6.3 are compromised - Looks connected to Mini shai hulud stealer/worm attack on SAP and Bitwarden More details soon.
Update: Socket confirmed the Intercom compromise began with a local install of pyannote-audio, which pulled in compromised PyPI lightning as a transitive dependency. 🤯 That single install kicked off a chain of compromises: PyPI lightning → npm intercom-client → Packagist
i should probably add to the noise and earn internet points like everybody else screaming about copy dot fail or mini shai hulud or cpanel hacks or github rce or password manager pwnage or codex goblins or zomg ai or whatever else is ‼️🚨BREAKING🚨‼️today but i'm just tired man
🚨 Active supply chain attack hitting SAP's CAP ecosystem on npm. Four packages tied to SAP's Cloud Application Programming Model just shipped versions with a new preinstall script that downloads and executes a platform-specific binary. These packages never required this before [i…
🚨 Two major supply chain attacks today, hitting both PyPI and npm simultaneously. Socket detected and confirmed malicious code in lightning versions 2.6.2 and 2.6.3 on PyPI, and intercom-client version 7.0.4 on npm. Both attacks use nearly identical tooling. Both are live right […
Update (April 30, 19:46:2): Intercom has confirmed to Socket that the root cause of the compromise was a local install of pyannote-audio, which introduced the compromised lightning package as a transitive dependency. That finding connects the attack chain across three
🚨 We've confirmed the intercom-client@7.0.4 was compromised in the ongoing Mini Shai-Hulud worm attack. The npm package includes a malicious preinstall hook that downloads and executes an unverified Bun binary, then runs an 11.7 MB obfuscated payload designed to steal [image]
Thanks to @SocketSecurity for quickly alerting us, so we could take down malicious intercom packages. First time we saw malware mimicking post install scripts not available in PHP with a plugin. Fortunately requires user input to enable a plugin, so no automatic execution in CI.
🚨 BREAKING: Mini Shai-Hulud has spread to Packagist. We detected a malicious intercom/intercom-php@5.0.2 package artifact tied to this campaign. The compromised #PHP package used Composer plugin execution to run during install/update, download Bun, and launch an obfuscated [image…
There is a surge of supply chain attacks (and it is only going to get worse) If you are using pnpm, take these steps to protect yourself: * set minimumReleaseAge to 7 days * set blockExoticSubdeps to true * configure onlyBuiltDependencies npm / yarn have similar settings
A new npm supply-chain compromise is targeting SAP developer workflows. Mini Shai-Hulud follows a familiar pattern, but with a smaller package set and a serious secret-stealing payload built to hit developer machines and CI/CD environments. Affected packages we're tracking: - [im…