Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for Shai-Hulud Worm Compromises Tensorlake NPM Package

Shai-Hulud Worm Compromises Tensorlake NPM Package

The Shai-Hulud worm compromised the tensorlake npm package to exfiltrate secrets and cryptocurrency browser data while implementing a destructive 'dead-man's switch' upon token revocation.

avatar
Tim Peck@timpeck3 days ago

1 intel report

Browser Cache Smuggling in ClickFix Social Engineering

Threat actors including Stardust Chollima and Sandworm are utilizing 'Browser Cache Smuggling' to deliver malware like Vidar Stealer and GeniexRAT by pre-fetching payloads into browser caches to bypass security scans and character limits.

avatar
Tim Peck@timpeck
9 hours ago
21