socket-dev · Crawled Jul 16, 2026

Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music Scraping

3 IoCs 1 Malware

AI Summary

AI music generator Suno suffered a breach stemming from the Shai-Hulud worm, which compromised a developer's machine and exfiltrated GitHub and cloud credentials. The attacker, using the handle ellie.191, accessed Suno's source code, customer data, and payment information without the company's public notification. The breach highlights the ongoing impact of the Shai-Hulud campaign, which spreads via trojanized npm, PyPI, and Packagist packages and exfiltrates credentials to public GitHub repositories.

AI-extracted · verify before operational use

Extracted Entities 1 found

Malware Shai-Hulud →

Indicators of Compromise 3 extracted

Type	Value	Detail
GitHub User	ellie.191	Details →
Package	Shai-Hulud	Details →
Package	Mini Shai-Hulud	Details →

MITRE ATT&CK TTPs 5 techniques

T1071.003 Mail Protocols · Command And Control T1195 Supply Chain Compromise · Initial Access T1485 Data Destruction · Impact T1555 Credentials from Password Stores · Credential Access T1566 Phishing · Initial Access