Mini Shai-Hulud: Cross-Ecosystem Supply Chain Attack Hits npm, PyPI, and Packagist
Date Observed: April 29–30, 2026Ecosystem: npm, PyPI, Packagist (PHP)Targets: SAP enterprise developers, AI/ML engineers, DevOps and DevSecOps teams using Intercom SDKsAttack Type: Supply chain compromise via stolen and abused CI/CD publishing credentials; preinstall hook injection; cross-ecosystem worm self-propagationImpact: Eight confirmed compromised package versions across three ecosystems; multi-cloud credential theft (GitHub, AWS, GCP, Azure); IDE persistence […]