Filename

setup.mjs

Confidence: ai extracted

Linked Entities 2

threat actor TeamPCP malware Shai-Hulud

Source Articles 5

The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15)
unit42 Jul 15, 2026
Massive ChainDrop npm supply-chain attack infects hundreds of packages
bleeping-computer Aug 4, 2026
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
socket-dev
ChainDrop npm Worm: Bun-loaded CI/CD credential harvester with Ethereum dead-drop C2
step-security Aug 4, 2026
Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks
hacker-news Aug 4, 2026