Detections
Analytics

SCA: security update for Shai-Hulud Worm Attack

high Tenable Self-Hosted Container Security Plugin ID 435346

Description

Malicious versions of several NPM packages were published.

See Also

https://cybersecuritynews.com/npm-supply-chain-attack-crowdstrike/

https://github.com/advisories/GHSA-xxwr-wv9g-7jw3

https://socket.dev/blog/ongoing-supply-chain-attack-targets-crowdstrike-npm-packages

https://www.koi.ai/incident/live-updates-sha1-hulud-the-second-coming-hundred-npm-packages-compromised

Plugin Details

Severity: High

ID: 435346

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 9/17/2025

Updated: 9/17/2025

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/17/2025

Vulnerability Publication Date: 9/17/2025