Experts say supply chain attacks compromised SAP and Intercom npm packages, plus the PyPI package Lightning, in a campaign that calls itself Mini Shai-Hulud
The wave of supply chain attacks aimed at security and developer tools has washed up more victims, namely SAP and Intercom npm packages, plus the lightning PyPI package.
The RegisterJessica Lyons
Context & Ripple Effects
This report sits at the opening of a broader Mini Shai-Hulud cluster: later coverage linked compromised packages associated with Mistral, UiPath, and TanStack to the same campaign, while subsequent reports described hundreds of malicious npm releases concentrated in the @antv ecosystem.
The pattern matters because it spans both npm and PyPI and reaches packages tied to recognizable software vendors, extending the exposure beyond a single maintainer or package family. A prior npm incident involving a phished maintainer account also underscores how a single compromised publishing identity can distribute risk widely.
First-order effects
Developers and organizations that consumed the affected SAP, Intercom, or Lightning releases need to identify whether compromised versions entered their build or deployment paths and replace or remediate them as appropriate.
The affected package publishers and registries face immediate pressure to investigate release provenance, contain suspect versions, and communicate scope to downstream users.
Second-order effects
Security teams will place more scrutiny on third-party dependencies and package-update workflows, particularly where developer, security, or automation tooling is pulled directly from public registries.
Other maintainers and vendors with similarly distributed packages are likely to tighten publishing-account controls and release verification as the campaign’s apparent package footprint expands.
Third-order effects
If campaigns can repeatedly spread through trusted registry releases, software supply-chain assurance shifts from a maintainer-level concern to an ecosystem-wide control problem spanning registries, vendors, and enterprise buyers.
The cross-registry pattern may accelerate demand for stronger dependency provenance and incident-disclosure practices, though the corpus does not establish which technical or policy measures will prevail.
The trend: Mini Shai-Hulud is one instance of a widening software-supply-chain threat in which compromise of trusted package distribution channels can propagate risk across developer ecosystems.
Update: Socket confirmed the Intercom compromise began with a local install of pyannote-audio, which pulled in compromised PyPI lightning as a transitive dependency. 🤯 That single install kicked off a chain of compromises: PyPI lightning → npm intercom-client → Packagist
Update (April 30, 19:46:2): Intercom has confirmed to Socket that the root cause of the compromise was a local install of pyannote-audio, which introduced the compromised lightning package as a transitive dependency. That finding connects the attack chain across three
Thanks to @SocketSecurity for quickly alerting us, so we could take down malicious intercom packages. First time we saw malware mimicking post install scripts not available in PHP with a plugin. Fortunately requires user input to enable a plugin, so no automatic execution in CI.
If your team touches npm or PyPi - literally number 1 priority should be figuring out your playbook of defenses and response to these supply chain attacks. The threat actors aren't slowing down and they're SCREAMING their MO from the rooftops. Lock it down.
🚨 Breaking: SAP NPM Packages Breached 🚨 SAP NPM packages were hijacked to deliver the next-gen of Shai-Hulud malware, dubbed “A Mini Shai-Hulud has appeared” We found over 1,200 public repositories with stolen credentials on GitHub, showing that the attack was successful and [ima…
🚨 Popular python package lightning was compromised an hour ago. It's already quarantined by pypi. What we know so far: - Versions 2.6.2 and 2.6.3 are compromised - Looks connected to Mini shai hulud stealer/worm attack on SAP and Bitwarden More details soon.
i should probably add to the noise and earn internet points like everybody else screaming about copy dot fail or mini shai hulud or cpanel hacks or github rce or password manager pwnage or codex goblins or zomg ai or whatever else is ‼️🚨BREAKING🚨‼️today but i'm just tired man
🚨 Active supply chain attack hitting SAP's CAP ecosystem on npm. Four packages tied to SAP's Cloud Application Programming Model just shipped versions with a new preinstall script that downloads and executes a platform-specific binary. These packages never required this before [i…
🚨 We've confirmed the intercom-client@7.0.4 was compromised in the ongoing Mini Shai-Hulud worm attack. The npm package includes a malicious preinstall hook that downloads and executes an unverified Bun binary, then runs an 11.7 MB obfuscated payload designed to steal [image]
🚨 BREAKING: Mini Shai-Hulud has spread to Packagist. We detected a malicious intercom/intercom-php@5.0.2 package artifact tied to this campaign. The compromised #PHP package used Composer plugin execution to run during install/update, download Bun, and launch an obfuscated [image…
There is a surge of supply chain attacks (and it is only going to get worse) If you are using pnpm, take these steps to protect yourself: * set minimumReleaseAge to 7 days * set blockExoticSubdeps to true * configure onlyBuiltDependencies npm / yarn have similar settings
A new npm supply-chain compromise is targeting SAP developer workflows. Mini Shai-Hulud follows a familiar pattern, but with a smaller package set and a serious secret-stealing payload built to hit developer machines and CI/CD environments. Affected packages we're tracking: - [im…
🚨 Two major supply chain attacks today, hitting both PyPI and npm simultaneously. Socket detected and confirmed malicious code in lightning versions 2.6.2 and 2.6.3 on PyPI, and intercom-client version 7.0.4 on npm. Both attacks use nearly identical tooling. Both are live right […