Threat Intelligence Report

Mini Shai-Hulud Resurfaces (No CVE): GitHub Worm Re-Probe new repo after Floods 1,600 Repos Across 21 Compromised Accounts

📅 June 21, 2026 📰 phoenix.security 🔍 0 CVE(s) referenced

Mini Shai-Hulud, a stealthy supply chain worm exploiting developer identities rather than code flaws, has actively compromised 21 GitHub accounts and exfiltrated secrets to 1,614 public repos—posing a forward-looking risk of poisoned package releases undetectable by traditional CVE-based scanners.

unclassified

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap

🎯 IOC Extraction

⚔️ MITRE ATT&CK TTPs

📦 STIX 2.1 Bundle