Digital Warfare Podcast Daily Brief May 22, 2026

The Digital Warfare Podcast · May 22, 2026 · 4m · transcript

Summary

The Mini Shai-Hulud campaign is one of the largest recent npm supply chain attacks, spreading through compromised maintainer accounts and malicious package updates across hundreds of trusted npm packages. The malware automatically steals GitHub tokens, npm credentials, cloud secrets, SSH keys, CI/CD authentication material, and environment variables, then attempts to propagate further by compromising additional repositories and package maintainers. The campaign demonstrates how rapidly software supply chain attacks can spread through trusted development ecosystems.

Key Takeaways

•…