13
likes
0
comments
daily view 0
monthly view 0

Share

Live Analytics

Comments 0

Mini Shai-Hulud: The npm Worm That Signs Its Own Malware (May 2026) Analytics Table

Income Estimates for Mini Shai-Hulud: The npm Worm That Signs Its Own Malware (May 2026)

Based on this YouTube video's total view count of 862 views and industry-standard rates, the estimated total earning is $1 - $2 through ad revenue. Historical data is not yet available to calculate daily, weekly, or monthly averages.

About Mini Shai-Hulud: The npm Worm That Signs Its Own Malware (May 2026)

Explore Mini Shai-Hulud: The npm Worm That Signs Its Own Malware (May 2026) with 862 views, 13 likes, and 0 comments. Experience the impact of this video content that has captured audience attention.

A self-spreading worm hit npm on May 11, 2026 — infecting the entire TanStack router ecosystem, UiPath packages, and dozens more. Every malicious version was published with a valid SLSA provenance attestation. This is the full technical breakdown of Mini Shai-Hulud, discovered by StepSecurity. 00:00 — A worm just published itself to npm 00:08 — Scope: TanStack, UiPath, Draftauth, Taskflow, Tolka 00:32 — The twist: it spreads by itself 00:54 — The 3-phase attack chain 01:20 — The injection: optionalDependencies + router_init.js 01:44 — The payload: hex vars + AES-256-GCM obfuscation 02:07 — How it harvests GitHub tokens 02:29 — How one stolen token becomes 40 compromised packages 02:55 — Why valid SLSA provenance failed to protect anyone 03:23 — The defense: runtime monitoring beat static trust 03:47 — Detection commands you can run today 04:11 — Trust the build, not the badge 🔗 Original StepSecurity write-up: https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem ⚠️ Compromised package versions you should audit immediately: • @tanstack/* — 1.169.5, 1.169.8 (and earlier ranges) • @uipath/* — multiple packages • @draftauth/*, @draftlab/* • @taskflow-corp/cli — 0.1.26, 0.1.27 • @tolka/cli — 1.0.2 Quick check on any repo: find node_modules -name 'router_init.js'

About YouTube Real-Time View Count

With SocialCounts.org’s view counter, track your YouTube video’s live view count and YouTube likes count in real time with fast, reliable updates.

Watch every YouTube video live view count rise with our real-time YouTube views tracker—built for accuracy and minimal delay.

Follow YouTube real time views as they happen, using our dedicated view counter for YouTube videos.

Get up-to-date live view count on YouTube and see real-time growth with SocialCounts.org’s smart tracking tools.

Embed Widget

Parameters:

  • fullscreen=true - Fullscreen counter
  • graph=true - Live graph chart
  • counter=0/1/2 - Select counter (0=likes, 1=views, 2=comments)
URL

Click to copy the embed URL to your clipboard