edxeth/shai-hulud-open-source

This repository contains the published source code of the "Shai-Hulud" supply chain attack malware, which was referenced in a May 2026 SecurityWeek article covering attacks against TanStack, Mistral AI, and UiPath. The README describes it as published for research and educational purposes, but the code is a fully functional attack tool written in TypeScript using Bun. The malware is designed to be injected into CI/CD pipelines (automated software build systems, such as GitHub Actions). Once activated, it operates in five phases. First it checks its environment and either activates immediately or runs silently in the background. Second it harvests credentials in parallel from the filesystem (reading over a hundred known locations including AWS credentials, SSH keys, cryptocurrency wallet files, shell history, and developer tool configs), from environment variables, from GitHub Actions runner process memory, from AWS SSM and Secrets Manager across seventeen regions, from Kubernetes cluster secrets, and from HashiCorp Vault. Third it encrypts the harvested data with AES-256 and exfiltrates it to a command-and-control server, with fallback channels including GitHub repositories. Fourth it propagates by backdooring npm packages, either through GitHub's OIDC token exchange or by injecting malicious code into packages the stolen npm tokens can publish to, and by committing malicious files into GitHub repositories. Fifth it installs a persistence daemon that acts as a dead man's switch: if a stolen token is revoked, it attempts to delete the victim's home directory. The repository is included here solely to document what the malware does. Installing or running it against systems without authorization would be illegal.