Over 1,800 developers were affected by a supply-chain attack on Mini Shai-Hilud.

Over 1,800 developers were impacted by the Mini Shai‑Hulud supply‑chain attack affecting SAP, Lightning, and Intercom packages. Malicious package versions exfiltrated credentials, keys, tokens, and other secrets to GitHub repositories marked with the phrase “A Mini Shai‑Hulud has Appeared.” The attack spread across PyPI, NPM, and Packagist, leveraging infected dependencies to propagate.

Read more:

https://www.securityweek.com/1800-hit-in-mini-shai-hulud-attack-on-sap-lightning-intercom/