“It’s Happening Again”: Tinycolor’s Worm Jumps Hosts, CrowdStrike Packages Trojanized

[Khushal]

Content source

https://socket.dev/blog/ongoing-supply-chain-attack-targets-crowdstrike-npm-packages

Ongoing Supply Chain Attack Targets CrowdStrike npm Packages...

Socket.dev found compromised various CrowdStrike npm packages, continuing the "Shai-Halud" supply-chain attack that previously hit `tinycolor`.

socket.dev

Popular Tinycolor npm Package Compromised in Supply Chain At...

Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers

socket.dev

 

[harlan4096]

Responding to npm package compromise by the Shai-Hulud worm.

How to recognize a Shai-Hulud worm attack on npm packages. Detection and response measures.

www.kaspersky.com

 

[harlan4096]

Self-propagating supply chain attack hits 187 npm packages

Security researchers have identified at least 187 npm packages compromised in an ongoing supply chain attack. The coordinated worm-style campaign dubbed 'Shai-Hulud' started yesterday with the compromise of the @ctrl/tinycolor npm package, and has now expanded to CrowdStrike's npm namespace.

www.bleepingcomputer.com