Grilled Cheese

ExploreLog inSign up
Terms of UsePrivacy PolicyCommunity StandardsHelpGet the app

Grilled Cheese is a product of Village Compute

Version devBuilt at: 2026-10-17 03:54:26 EDT

PhotosVideosAllPeople
LatestRanked
@threadlinqs.bsky.socialOct 16, 2026, 6:32 PM

A Shai-Hulud detector's test files were working malware - AI-written 'simulations' that wipe and steal. https://intel.threadlinqs.com/threat/TL-2026-3766 #ThreatIntel #ShaiHulud #SupplyChainAttack #npm

Shai-Hulud detection tool shipped functional malware as AI-generated test files
@threadlinqs.bsky.socialOct 16, 2026, 11:08 AM

Open source supply chain attacks now land every few days - worms, poisoned Actions, hijacked SDKs. https://intel.threadlinqs.com/threat/TL-2026-3729 #ThreatIntel #CanisterWorm #ShaiHulud #Hades

Open Source Supply Chain Attack Surge: 56 Confirmed Attacks in 12 Months Across npm, PyPI, RubyGems, Composer, Rust Crates and GitHub Actions (Shai-Hulud, TeamPCP, Axios, Miasma, ChainDrop)
@threadlinqs.bsky.socialOct 12, 2026, 10:43 PM

Shai-Hulud, PhantomRaven, SUNBURST: poison upstream once, ride trust into every downstream build. https://intel.threadlinqs.com/threat/TL-2026-3376 #ThreatIntel #ShaiHulud #PhantomRaven #SUNBURST

Software Supply Chain Attacks: Upstream Poisoning via Registries, Maintainer Accounts and Build Pipelines (Shai-Hulud, PhantomRaven, SUNBURST)
@threadlinqs.bsky.socialOct 10, 2026, 6:41 AM

Shai-Hulud's npm worm persists via .claude + VS Code configs, with a token-revoke dead-man's switch. https://intel.threadlinqs.com/threat/TL-2026-3216 #ThreatIntel #ShaiHulud #Mini #npm

Sonatype Q3 2026 Open Source Malware Index: Compounding Supply-Chain Compromise (Mini Shai-Hulud npm wave, mlflow-ui PyPI AI-agent-uploaded malware)
@threadlinqs.bsky.socialOct 10, 2026, 6:16 AM

ChainDrop npm worm reads its C2 from an Ethereum contract - and scrapes CI runner memory for OIDC tokens. https://intel.threadlinqs.com/threat/TL-2026-3214 #ThreatIntel #DEVPOPPER #ShaiHulud #BeaverTail

ChainDrop npm Worm and PolinRider DPRK-Linked Operation Use Blockchain C2 to Steal Cloud and CI/CD Credentials
@threadlinqs.bsky.socialOct 9, 2026, 4:18 AM

Revoke the stolen token and this npm worm wipes your home directory. Tensorlake 0.5.144 is backdoored. https://intel.threadlinqs.com/threat/TL-2026-3085 #ThreatIntel #ShaiHulud #phantom #HackBrowserData

Tensorlake npm Package Compromised (0.5.144) to Spread Shai-Hulud Worm Variant and Steal Developer Secrets
@hacks.grOct 8, 2026, 9:02 PM

A malicious Tensorlake release runs on installation, before a developer uses it.

Aikido says it seeks credentials and can spread to other projects.…

https://en.hacks.gr/kakovoyli-ekdosi-toy-tensorlake-sto-npm-prospathei-na-klepsei-stoicheia-prosvasis/

#Tensorlake #ShaiHulud #SoftwareSupplyChain

Κακόβουλη έκδοση του Tensorlake στο npm προσπαθεί να κλέψει στοιχεία πρόσβασης
@reconbee.bsky.socialOct 8, 2026, 9:57 AM

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm reconbee.com/tensorlake-n...

#tensorlake #npmpackage #npm #shaihulud #credential #cybersecurity #cyberattack

@hacks.grOct 8, 2026, 7:01 AM

Tensorlake version 0.5.144 contained Shai-Hulud, designed to steal access credentials and spread through packages a user could publish.

The releas…

https://en.hacks.gr/i-ekdosi-0-5-144-toy-tensorlake-sto-npm-ekryve-programma-klopis-stoicheion-prosvasis/

#Tensorlake #ShaiHulud #SoftwareSupplyChain

Η έκδοση 0.5.144 του Tensorlake στο npm έκρυβε πρόγραμμα κλοπής στοιχείων πρόσβασης
@thedailytechfeed.comOct 8, 2026, 6:20 AM

Tensorlake 0.5.144 was hijacked by a worm stealing credentials, persisting via AI tool configs. Remove it now. #ShaiHulud #SupplyChain #AI #CloudSecurity #CredentialTheft #DevSecOps https://thedailytechfeed.com/tensorlake-npm-package-hijacked-by-shai-hulud-worm-threat/

Photo, no description
@threadlinqs.bsky.socialOct 1, 2026, 5:52 AM

A hijacked keyv maintainer shipped a npm worm with valid SLSA provenance - and it republishes itself. https://intel.threadlinqs.com/threat/TL-2026-2822 #ThreatIntel #ChainDrop #ShaiHulud #Bun

'ChainDrop' self-propagating worm compromises hundreds of popular npm packages (keyv, cacheable ecosystem) via Bun-loaded credential stealer with Ethereum dead-drop C2
@sakaijjang.bsky.socialSep 30, 2026, 3:23 PM

개발자 자격증명 을 노린 Shai-Hulud 악성코드-_index.js
wezard4u.tistory.com/429884
#개발지 #악성코드 #ShaiHulud

@threadlinqs.bsky.socialSep 30, 2026, 12:40 PM

Mini Shai-Hulud hijacked on npm - one preinstall hook drains CI/CD and cloud secrets. https://intel.threadlinqs.com/threat/TL-2026-2806 #ThreatIntel #BackdoorPython #ShaiHulud #Bun

Mini Shai-Hulud: Compromised @antv npm Packages Steal Developer and CI/CD Credentials (TeamPCP)
@thenewoil.orgSep 26, 2026, 7:30 PM

#GitHub Actions re-enabled with Mini #ShaiHulud payload still active

https://www.bleepingcomputer.com/news/security/github-actions-re-enabled-with-mini-shai-hulud-payload-still-active/

#cybersecurity #malware

@threadlinqs.bsky.socialSep 26, 2026, 3:08 PM

GitHub re-enabled a hacked Action without cleaning its tags - the credential thief woke right back up. https://intel.threadlinqs.com/threat/TL-2026-2661 #ThreatIntel #Mini #ShaiHulud #One

Re-Enabled actions-cool GitHub Actions (issues-helper, maintain-one-comment) Resume Executing Mini Shai-Hulud CI/CD Credential-Theft Payload
@outofstepdotnet.bsky.socialSep 22, 2026, 2:50 AM

Rest In Peace Chad Gilbert.

Chad Gilbert PSA for Musicians Opposed to Bullying, 2012. Source: Ytube Photobycourtneymob. #chadgilbert #newfoundglory #shaihulud #outofstepdotnet #punkrock #hardcorepunk #poppunk #hazenstreet #musiciansopposedtobullying

@staygold21.bsky.socialSep 20, 2026, 7:46 PM

Chad Gilbert passed from life to life this morning. I knew him and his family in the mid to late 90s and 2000s. I will always cherish his excitement for life. He will always be loved and forever held in my heart. @profoundhatred.bsky.social #chadgilbert #shaihulud #newfoundglory #2000s

Photo, no description
@thedailytechfeed.comSep 16, 2026, 1:49 PM

AI coding assistant hijacked: poisoned deps led to Shai-Hulud worm in 100 repos. #Security #AI #ShaiHulud #SupplyChain #DevSecOps #Malware thedailytechfeed.com/ai-coding-se...

Photo, no description
@cody-programmer08.bsky.socialSep 10, 2026, 11:38 AM

Guess the programming term in the comments!

#Cybersecurity #MITM #DDoS #DoS #ShaiHulud

Photo, no description
@cyberveille-ch.bsky.socialSep 10, 2026, 10:30 AM

📢 Shai-Hulud : un payload npm identique réapparu après 111 jours de dormance

Le 19 mai 2026, une attaque de chaîne d'approvisionnement baptisée Shai-Hulud avait compromis des comptes mainteneurs npm pour publier 639 versions…

🟢 vérification factuelle haute
#ShaiHulud #npm #Cyberveille

Load more