hello-shai

GHSA-3rj6-px2x-9jf8

Malicious code in hello-shai (npm)

Details

**Severity:** Critical

**Affected versions:** `= 1.0.1`

## Source: google-open-source-security (297f2a57d1c225e18d8464c2024daef4567955be0eb8cd8d45052aa778fb4f3a)
This package was compromised by the Shai-Hulud NPM worm. The malicious payload
steals tokens and credentials and publishes them to GitHub before propogating
itself to NPM packages the user owns.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/05b419acdcdd6e02782971da765f32a22a1aed8e/osv/malicious/npm/hello-shai/MAL-2025-47450.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/05b419acdcdd6e02782971da765f32a22a1aed8e/osv/malicious/npm/hello-shai/MAL-2025-47450.json
- https://semgrep.dev/blog/2025/security-advisory-npm-packages-using-secret-scanning-tools-to-steal-credentials
- https://socket.dev/blog/tinycolor-supply-chain-attack-affects-40-packages
- https://www.aikido.dev/blog/s1ngularity-nx-attackers-strike-again
- https://www.stepsecurity.io/blog/ctrl-tinycolor-and-40-npm-packages-compromised
- https://www.wiz.io/blog/shai-hulud-npm-supply-chain-attack
- https://github.com/advisories/GHSA-3rj6-px2x-9jf8

Compromised versions (1)

= 1.0.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.