NPM-Scan v1.1.0: Four New Detectors for June 2026 Supply Chain Attacks

 (github.com)

2 points | by lateos-ai 4 hours ago

1 comments

  • lateos-ai 4 hours ago
    Detection validation on three real-world campaigns from June 2026: - @redhat-cloud-services Miasma (32 packages) - TanStack Mini Shai-Hulud (84 versions) - Axios Backdoor (transitive injection)

    Detectors: Self-propagation, encrypted C2, transitive deps, maintainer compromise.