Threat Intelligence / Actor / Unattributed (pl-ghost / Shai-Hulud-overlapping operator)

Unattributed (pl-ghost / Shai-Hulud-overlapping operator)

1 tracked threat(s) · Categories: SUPPLY_CHAIN

Also known as: pl-ghost, Shai-Hulud-overlap operator

Tracked threats

lightning PyPI Package Compromise — Versions 2.6.2 & 2.6.3 Execute Bun-Based JavaScript Credential Stealer on Import (Shai-Hulud-Overlapping) — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence