Home Today’s Briefing Deep Dives In Play Trending For You Discover My Stack Saved Off Radar Search

Loading today’s stories

Today

AI-assisted reporting, grounded in a per-article claim ledger. Perspective Coverage and Reality Strip separate source viewpoints from evidence, adoption, hype, incentives, and confidence.

Today

Front Page
Today’s Briefing
Newsletters
Trending
For You
Discover
My Stack
Saved
Off Radar
Search

Sections

Security
Build
Invest
Product
Leadership
Science

Company

About
Mission
How this is made
Evidence Index
The desks
The sources we read
Corrections
Press and brand
The daily edition

Trending now

AI Agent Security
Software Supply Chain Security
AI Infrastructure Capex
Model Context Protocol Adoption
Teen online safety
Agentic assistants
Platform Regulation
Teen Product Defaults
Identity Verification
Multi-Agent Coordination

How this is made

Today For You My Stack Off Radar Search

Mini Shai-Hulud — other — Clarity Today

other

Mini Shai-Hulud

Self-propagating worm deployed by TeamPCP to automate credential theft across package registries; its framework was open-sourced in May 2026.

Known aliases

Shai-Hulud

Relationships

No evidence-backed relationships are recorded.

Current clusters

security2 distinct publishers

Perth charges leave the TeamPCP rotation list exactly where the FBI left it on July 2

Two Western Australians face 14 charges over the March compromise of Trivy, KICS and LiteLLM, but the credentials that campaign harvested remain tradeable, so the FBI's order to rotate every exposed CI/CD secret stands.

Publishers:securityweek.com · thehackernews.com

Reality

Evidence76
Adoption71
Hype gap+16
Incentives62

Confidence72