Shai-Hulud
Unknown Dormant
- Mentions
- 1
- First seen
- 16 Jun 2026
- Last seen
- 16 Jun 2026
Relevant to you · Relevant
- Threat focus:
- supply chain
Origin
Unattributed
Profile
Shai-Hulud is a threat actor linked to a supply-chain worm. This worm exploits vulnerabilities in GitHub that were previously dismissed by GitHub as non-security issues. Researchers report that the worm infiltrates the supply chain and spreads through these flaws.
Affected vendors
GitHub
Targeted sectors
TechnologySoftware Development
Targeted regions
Global
Associated malware / tools
supply-chain worm