Shai-Hulud Trinitite：新变种攻击周下载15万+的npm包
JFrog安全团队发现Shai-Hulud家族新变种Trinitite，攻击npm包@7nohe/openapi-react-query-codegen，该包周下载量超15万。攻击者通过PR评论触发发布工作流，20分钟内发布10个版本，植入worm窃取GitHub/npm/PyPI等凭证。 与8月底TeamPCP成员在澳大利亚被捕时间吻合，可能是同一团伙或新成员使用相同工具。
评论
点赞
收藏Reachy Mini 蓝牙命令处理存在路径穿越漏洞，可导致任意 Root 脚本执行
JFrog 披露 Reachy Mini 蓝牙命令服务存在路径穿越漏洞（CVE-2026-62661），攻击者可通过构造 CMD_ 载荷绕过命令目录限制，以 root 权限执行任意.sh 脚本。 该漏洞是三步攻击链的最后一环：不受限的文件上传、蓝牙认证绕过、路径穿越。PoC 已公开，升级至 reachy-mini 1.10.0 可修复。
crates.io 三个热门 Rust crate 被入侵，编译时静默执行恶意代码
JFrog发现上3个热门Rust crate被入侵，累计下载量近2.6亿次。arrayref、internment、append-only-vec的新版本悄悄依赖了伪造的proc-macro1（仿冒proc-macro2），利用在编译时下载并执行平台特定恶意负载。 恶意版本已从移除，但攻击窗口期内的构建可能已执行payload。建议检查Cargo.lock，回退到干净版本，扫描受影响主机。
Shai Hulud campaign strikes NPM again
The JFrog security research team identified a new version of the Shai-Hulud supply-chain malware affecting 400+ packages across 1700+ versions. The compromise started with the `keyv` and `cacheable` n...
SQLite"关键漏洞"CVE实为AI幻觉产物，JFrog逐一证伪
JFrog安全研究员验证了一批声称存在于SQLite中的高危CVE，发现全部为AI生成的虚假漏洞。引用的函数在目标版本中根本不存在，PoC无法复现，源码审计显示漏洞机制纯属捏造。 CVE提交流程缺乏身份验证，NVD深度审核机制2024年2月暂停后，虚假漏洞可轻易流入企业扫描器。
Kimi Code is vulnerable to a FetchURL SSRF Protection Bypass via DNS-resolving Hostnames and Redirects
Summary Kimi Code is vulnerable to a FetchURL SSRF Protection Bypass via DNS-resolving Hostnames and Redirects ## Component @moonshot-ai/kimi-code (Kimi Code) ## Affected versions < 0.27.0 ## Descript...
NoteGen is vulnerable to Arbitrary OS Command Execution via Tauri shell:allow-execute for bash/python
Summary NoteGen is vulnerable to Arbitrary OS Command Execution via Tauri shell:allow-execute for bash/python ## Component note-gen (NoteGen) ## Affected versions < 0.32.0 ## Description NoteGen befor...
NoteGen is vulnerable to Chat Preview XSS via Unsanitized AI/Skill HTML Rendering
Summary NoteGen is vulnerable to Chat Preview XSS via Unsanitized AI/Skill HTML Rendering ## Component note-gen (NoteGen) ## Affected versions < 0.32.0 ## Description NoteGen before 0.32.0 renders AI ...
The Perfect Heist: NuGet Typosquat Targets Betting Platform to Rig Results
The JFrog Security Research team has discovered and disclosed a typosquatted NuGet package named. Note the double t and the.Net suffix. This package has been masquerading as the popular Newtonsoft.Jso...
Miasma Worm Returns to npm
/img/RealTimePostImage/post/miasma-worm-returns-to-npm/banner.png Four AsyncAPI npm packages previously hijacked in the Shai-Hulud: The Second Coming campaign were compromised again: @asyncapi/generat...
Lucide Proxy: Turning Student Web Proxies into DDoS Bots
We deobfuscated a massive campaign of 148 npm packages, including ilovefemboys, miguelphonk, and charlie-kirk. Disguised as student web proxies under names like Riverbend Tutoring, these packages hid ...
IronWorm Returns as jscrambler, Rustier Than Ever
Only a month after we exposed the IronWorm infostealer, an evolved variant has surfaced in compromised versions of the popular jscrambler npm package, resembling similar behavior to Shai-Hulud; like t...
Injective SDK Compromise: Crypto Wallet Keys Stolen Through Fake Telemetry
The JFrog Security Research team analyzed the compromised @injectivelabs/sdk-ts npm package version 1.20.21, an official Injective Labs TypeScript SDK release that briefly shipped a wallet-key stealer...
Lazarus-Linked npm Malware Masquerades as Rollup Polyfills
The JFrog Security research team identified a malicious npm package cluster masquerading as Rollup polyfill tooling. The two entry packages, rollup-packages-polyfill-core and rollup-runtime-polyfill-c...
DirtyClone (CVE-2026-43503): Linux Kernel LPE
DirtyClone at a glance What is it? DirtyClone is a high-severity local privilege escalation flaw in the Linux kernel (CVE-2026-43503, CVSS 8.8). It lets any unprivileged local user gain root access by...
Shai-Hulud Continues: Hades Payload Hits Leo/RStreams npm Packages
JFrog Security Research identified a new Shai-Hulud/Hades npm wave affecting 20 packages in the Leo/RStreams ecosystem. The malicious packages belong to a legitimate package family used for AWS-native...
Hijacked npm Packages Use Novel VSCode Autorun and Blockchain Dead Drops to Deploy a Credential/Crypto Stealer
/img/RealTimePostImage/post/vscode-blockchain-npm/image1.png Update 25/06/2026 - Following our report, Nextron Research identified an additional 16 Go packages containing the same malware. Most appear...
From PostCSS Masquerading to Windows RAT
/img/RealTimePostImage/post/postcss-typosquat-windows-rat.png The package name is not random. The legitimate postcss-selector-parser package is widely used across the JavaScript build ecosystem, with ...
FFmpeg is vulnerable to a Heap Out-of-Bounds Write in the MagicYUV Decoder (PixelSmash)
Summary FFmpeg is vulnerable to a Heap Out-of-Bounds Write in the MagicYUV Decoder (PixelSmash) ## Component ffmpeg (libavcodec/magicyuv.c) ## Affected versions < 8.1.2 ## Description A heap-based out...
easy-day-js: Supply Chain Campaign Targets Mastra npm Packages
JFrog Security Research analyzed a supply chain campaign that targeted Mastra npm packages by adding a malicious production dependency named easy-day-js. The affected Mastra package code was left larg...
The Reachy Mini Wireless image is vulnerable to a Local Privilege Escalation via an Unrestricted sudo systemctl Grant
Summary The Reachy Mini Wireless image is vulnerable to a Local Privilege Escalation via an Unrestricted sudo systemctl Grant ## Component reachy-mini-os ## Affected versions < 0.2.4 ## Description Th...
The Reachy Mini daemon is vulnerable to an Unrestricted File Upload in the Media Sounds Upload API
Summary The Reachy Mini daemon is vulnerable to an Unrestricted File Upload in the Media Sounds Upload API ## Component reachy-mini (reachy_mini daemon) ## Affected versions < 1.8.2 ## Description The...