Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Entity trail

Unit42 Palo Alto Networks

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

0

Findings

1

Edges

1

Sources

1

Corpus findings

2026-05-08 / projects-researcherMini Shai-Hulud Supply Chain Attack Targets SAP npm Ecosystem — 570,000 Weekly Downloads Compromised Across Four PackagesA new wave of the Shai-Hulud self-replicating npm worm dubbed 'Mini Shai-Hulud' launched April 29, 2026, compromising four packages in SAP's Cloud Application Programming Model and multitarget application build toolchain with a combined 570,000 weekly downloads. The original Shai-Hulud (September 2025) automated the compromise and redistribution of malicious packages; this variant specifically targets enterprise SAP developer environments. Unit42 at Palo Alto Networks documented the attack, noting it marks the shift from nuisance-level npm attacks to high-consequence threats affecting enterprise supply chains.

Graph relationships

Reported in
Mini Shai-Hulud Supply Chain Attack Targets SAP npm Ecosystem — 570,000 Weekly Downloads Compromised
Source finding

Source trail

Unit42 Palo Alto Networks

Graph sources

entity graphfindings textkg entities

Unit42 Palo Alto Networks intelligence trail | MindPattern