CYB-003 Self-replicating "Shai-Hulud" worm compromised over 500 npm packages, per CISA

ID: CYB-003
Category: Cyber Cyber incident linked to an AI incident
Disclosed: 2025-09
Systems: npm packages (over 500)
Harm type: Supply chain / credential theft (worm)
Status: reported
CISA published the alert. CISA is a government agency, not a vendor, so "reported" is the closest existing status value. No fix statement is recorded.
CISA KEV: Not applicable: no CVE is cited for this incident
Product: npm packages

Summary

CISA reports a self-replicating worm publicly known as "Shai-Hulud" compromised over 500 npm packages. CISA says the malware scanned for credentials, targeted GitHub personal access tokens and AWS, GCP and Azure API keys, exfiltrated them to an actor-controlled endpoint, and uploaded them to a public repository named Shai-Hulud via the GitHub API.

Techniques

Technique-level mapping, an editorial judgment made by the method.

T1195.002 Compromise Software Supply Chain
T1552.001 Credentials In Files

MITRE ATT&CK technique IDs and names: © The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. ATT&CK terms of use

Controls

Controls that could prevent, detect, or support recovery from this kind of failure. Mappings are editorial judgments made by the method, not findings about what any party should have done.

NIST AI RMF

Not mapped. AI RMF mapping is optional for cyber incidents.

NIST SP 800-53

SR-3 Supply Chain Controls and Processes
IA-5 Authenticator Management
AC-6 Least Privilege
SI-7 Software, Firmware, and Information Integrity

Human-approval (JCR) checkpoint

not applicable

Correlated incidents

Co-occurrence, not cause: each link records something the two incidents share, as its rationale and source state. It does not say one incident caused the other. Links are written on one record; the other record shows the same link marked derived.

AI AIA-008 Malicious Nx npm packages included a prompt for an AI "file-search agent", per Nx

same technique

Both are npm package compromises that harvested credentials and published them to GitHub repositories: Shai-Hulud uploaded them to a public repository, per CISA, and the malicious nx versions posted them to GitHub, per Nx.

Source: github.com https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c

Sources

cisa.gov primary link checked 2026-10-31, HTTP 200
Released Sept 23, 2025
https://www.cisa.gov/news-events/alerts/2025/09/23/widespread-supply-chain-compromise-impacting-npm-ecosystem

Corrections

No corrections recorded.

To report an error in this entry, see corrections.