--- title: Shai-Hulud worm hits Microsoft repos, Check Point VPN... description: A major supply chain campaign (Shai-Hulud) poisoned 73 cryptographically signed Microsoft open-source packages with the Miasma credential stealer, causing... canonical: https://daily.dev/posts/shai-hulud-worm-hits-microsoft-repos-check-point-vpn-zero-day-exploited-for-a-month-tujtzvo1i twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Shai-Hulud worm hits Microsoft repos, Check Point VPN zero-day exploited for a month | daily.dev og:description: A major supply chain campaign (Shai-Hulud) poisoned 73 cryptographically signed Microsoft open-source packages with the Miasma credential stealer, causing... og:url: https://daily.dev/posts/shai-hulud-worm-hits-microsoft-repos-check-point-vpn-zero-day-exploited-for-a-month-tujtzvo1i og:image: https://api.daily.dev/og/posts/TuJTzvo1i.png og:image:alt: Shai-Hulud worm hits Microsoft repos, Check Point VPN zero-day exploited for a month og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Shai-Hulud worm hits Microsoft repos, Check Point VPN zero-day exploited for a month **[Security Digest](https://daily.dev/sources/security_digest)** · 5 min read · 0 upvotes · 0 comments ## Summary A major supply chain campaign (Shai-Hulud) poisoned 73 cryptographically signed Microsoft open-source packages with the Miasma credential stealer, causing GitHub to pull 70+ repos and break CI/CD pipelines globally. The campaign now spans 471 malicious artifacts across PyPI and npm, with new techniques including a wiper that destroys the victim's home directory if a stolen GitHub token is revoked, and a fake prompt-injection header designed to fool LLM-based security tools. A Check Point VPN zero-day (CVE-2026-50751, CVSS 9.3) was exploited by a Qilin ransomware affiliate for roughly a month before a patch existed. protobuf.js received six CVEs including an RCE via JavaScript's Function() constructor, affecting a library with 50 million weekly downloads. Additional notable issues include an unauthenticated RCE in Gogs, an actively exploited Cisco SD-WAN flaw, a triple-chain UniFi OS RCE, a VS Code extension auto-update delay for supply chain protection, and uv gaining native audit and malware detection capabilities. ## Content **TLDR:** The Shai-Hulud supply chain campaign expanded significantly: 73 cryptographically signed Microsoft open-source packages were poisoned with the Miasma credential stealer, GitHub pulled 70+ Microsoft repos and broke CI/CD pipelines globally, and a separate gpt-pilot compromise was only stopped by a Python linter catching formatting violations in the injected code. Check Point patched a critical IKEv1 authentication bypass (CVE-2026-50751, CVSS 9.3) that a Qilin ransomware affiliate had been exploiting since May 7 — roughly a month before a fix existed. The Shai-Hulud campaign now tracks 471 malicious artifacts across PyPI and npm, with novel techniques including wiper deterrents, LLM-confusing prompt injection headers, and SLSA attestation abuse. protobuf.js also landed six CVEs today, including an RCE via JavaScript's Function() constructor affecting a library with 50 million weekly downloads. --- ## Shai-Hulud worm compromises 73 Microsoft packages, GitHub pulls 70+ repos TeamPCP used stolen Microsoft publishing credentials to inject the Miasma credential stealer into 73 cryptographically verified Microsoft open-source packages, including integrations for Claude Code, Gemini CLI, and VS Code. GitHub removed 70+ Microsoft repositories in response, breaking CI/CD pipelines globally — and GitHub initially described the takedown only as a 'terms of service violation' rather than disclosing the malicious nature of the packages. The malware steals credentials from AWS, Azure, GCP, Kubernetes, password managers, and 90+ developer tool configs, then spreads laterally through cloud infrastructure. This is Microsoft's second such compromise in weeks, with researchers suggesting it may be a re-compromise of the same Durable Task project hit in mid-May. [Read more](https://app.daily.dev/feed-by-ids?id=F16SkZhxx&id=FRfTqlS6g&id=7xWiEYHC9&id=NVzcFrIXe) ## Shai-Hulud campaign grows to 471 artifacts, adds wiper deterrent and LLM misdirection Socket Threat Research identified 23 new malicious PyPI packages bringing the total Shai-Hulud/Miasma/Hades campaign to 471 artifacts across npm and PyPI. The Hades branch now uses three delivery mechanisms: .pth startup hooks, trojanized native .abi3.so extensions that execute at import time, and a langchain-core-mcp loader variant. The most alarming additions are a wiper that destroys the victim's home directory if a stolen GitHub token is revoked — explicitly discouraging credential rotation — and a fake prompt-injection header designed to confuse LLM-based security analysis tools into generating false negatives. Defenders should audit Python environments for executable .pth files and unexpected .abi3.so extensions, and rotate any potentially exposed credentials immediately. [Read more](https://app.daily.dev/feed-by-ids?id=KBwSjOIHP&id=PpODpF9Q9&id=PBX2B1Ksk&id=rhP4RXaD7) ## Check Point VPN zero-day CVE-2026-50751 exploited by Qilin ransomware for a month pre-patch Check Point patched CVE-2026-50751 (CVSS 9.3), an authentication bypass in the deprecated IKEv1 protocol affecting Remote Access VPN and Mobile Access products. Exploitation started around May 7 and targeted dozens of organizations globally before a fix was available — giving the Qilin ransomware affiliate roughly a month of uncontested access. A second related flaw, CVE-2026-50752 (CVSS 7.4), enabling adversary-in-the-middle attacks on site-to-site tunnels, was also patched but shows no in-the-wild exploitation. Hotfixes are available for supported versions; four affected version branches are end-of-support. Interim mitigations: disable legacy IKEv1, enforce IKEv2 with machine certificates, and check published IOCs — a software update alone won't remediate already-compromised systems. [Read more](https://app.daily.dev/feed-by-ids?id=M3WbW9Z8q&id=8Lk5ARI1G&id=LXnNqkhtj&id=4g0JMo3nT) ## protobuf.js gets six CVEs including RCE via Function() constructor, affects 50M weekly downloads Cyera researchers disclosed six CVEs in protobuf.js, covering RCE, prototype injection, and denial-of-service. The worst, CVE-2026-44291, lets attackers manipulate schema-derived data so it becomes executable code through JavaScript's Function() constructor inside Node.js processes. A separate CLI flaw (CVE-2026-44295) allows code injection into generated JavaScript files via crafted schema names. Because protobuf.js is a common transitive dependency pulled in through gRPC tooling and Google Cloud libraries, many teams are exposed without knowing it. Patches are in protobuf.js 7.5.6 and 8.0.2, and protobuf.js-cli 1.2.1 or 2.0.2. [Read more](https://app.daily.dev/posts/sSMnsKxPA) --- ## Also notable - **Gogs 0.14.3 patches unauthenticated RCE zero-day affecting all default installs:** Rapid7 researcher Jonah Burgess found an argument injection flaw in all Gogs releases up to 0.14.2 that lets an unauthenticated attacker register an account, create a repo, and achieve full RCE — because open registration and unlimited repo creation are on by default. Over 2,300 internet-exposed Gogs servers are currently tracked by Shadowserver; patch to 0.14.3 or disable open registration immediately. [Read more](https://app.daily.dev/posts/2EFUornd1) - **Cisco Catalyst SD-WAN Manager CVE-2026-20245 actively exploited, no patch yet:** Cisco disclosed an actively exploited high-severity CLI flaw in Catalyst SD-WAN Manager that lets authenticated netadmin users escalate to root via crafted file upload and command injection; Mandiant reported it and links it to cyberespionage group UAT-8616, with IOCs visible in scripts.log. [Read more](https://app.daily.dev/posts/flFTxGM0p) - **UniFi OS Server triple-chain CVE-2026-34908/34909/34910 enables unauthenticated root RCE:** Bishop Fox chained three vulnerabilities in UniFi OS Server 5.0.6 — auth bypass via URI normalization mismatch, path traversal, and command injection — to reach a passwordless sudo account and get root without credentials; upgrade to 5.0.8 and verify the system wasn't already compromised before patching. [Read more](https://app.daily.dev/posts/WfqtINGlo) - **VS Code 1.123 adds two-hour extension auto-update delay for non-trusted publishers:** VS Code 1.123 introduces a two-hour hold before extensions from non-Microsoft/GitHub/OpenAI publishers auto-update, giving time to detect compromised releases before they reach developer machines — a direct response to the wave of supply chain attacks hitting developer tooling. [Read more](https://app.daily.dev/posts/qA1dOnHqw) - **uv adds native audit and experimental malware detection via OSV:** Astral's uv package manager gains a uv audit command (4-10x faster than pip-audit) and an opt-in UV_MALWARE_CHECK=1 flag that blocks known malicious packages on every sync before they can execute — relevant given the current PyPI supply chain campaign. [Read more](https://app.daily.dev/posts/wuU9roi2k) ## Similar posts on daily.dev - [New Shai-Hulud malware wave compromises 600 npm packages](https://daily.dev/posts/new-shai-hulud-malware-wave-compromises-600-npm-packages-fc6izpxyv) · BleepingComputer · 5 upvotes · 1 comments - [Shai-Hulud worm infects npm packages](https://daily.dev/posts/shai-hulud-worm-infects-npm-packages-mpt5bnev9) · Securelist · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#python](https://daily.dev/tags/python), [#malware](https://daily.dev/tags/malware), [#vulnerability](https://daily.dev/tags/vulnerability) [View this post on daily.dev](https://daily.dev/posts/shai-hulud-worm-hits-microsoft-repos-check-point-vpn-zero-day-exploited-for-a-month-tujtzvo1i) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/shai-hulud-worm-hits-microsoft-repos-check-point-vpn-zero-day-exploited-for-a-month-tujtzvo1i","headline":"Shai-Hulud worm hits Microsoft repos, Check Point VPN zero-day exploited for a month","text":"A major supply chain campaign (Shai-Hulud) poisoned 73 cryptographically signed Microsoft open-source packages with the Miasma credential stealer, causing GitHub to pull 70+ repos and break CI/CD pipelines globally. The campaign now spans 471 malicious artifacts across PyPI and npm, with new techniques including a wiper that destroys the victim's home directory if a stolen GitHub token is revoked, and a fake prompt-injection header designed to fool LLM-based security tools. A Check Point VPN zero-day (CVE-2026-50751, CVSS 9.3) was exploited by a Qilin ransomware affiliate for roughly a month before a patch existed. protobuf.js received six CVEs including an RCE via JavaScript's Function() constructor, affecting a library with 50 million weekly downloads. Additional notable issues include an unauthenticated RCE in Gogs, an actively exploited Cisco SD-WAN flaw, a triple-chain UniFi OS RCE, a VS Code extension auto-update delay for supply chain protection, and uv gaining native audit and malware detection capabilities.","url":"https://daily.dev/posts/shai-hulud-worm-hits-microsoft-repos-check-point-vpn-zero-day-exploited-for-a-month-tujtzvo1i","datePublished":"2026-06-09T04:18:41.030Z","dateModified":"2026-06-09T04:19:07.373Z","author":{"@type":"Organization","name":"Security Digest","logo":"https://media.daily.dev/image/upload/s--m4ZKB_C0--/f_auto,q_auto/v1779959612/logos/security_digest","url":"https://daily.dev/sources/security_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/security_digest","name":"Security Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Digest","item":"https://daily.dev/sources/security_digest"},{"@type":"ListItem","position":3,"name":"Shai-Hulud worm hits Microsoft repos, Check Point VPN zero-day exploited for a month"}]} ```