Re:NPM-Scan v1.1.0: Four New Detectors for June 2026 Supply ...
by lateos-ai on Thursday June 04, 2026 @11:03PM
(#48407444)
Detection validation on three real-world campaigns from June 2026:
- @redhat-cloud-services Miasma (32 packages)
- TanStack Mini Shai-Hulud (84 versions)
- Axios Backdoor (transitive injection)
Detectors: Self-propagation, encrypted C2, transitive deps, maintainer compromise.