NPM-Scan v1.1.0: Four New Detectors for June 2026 Supply Chain Attacks(github.com)

2 pointsby lateos-ailetzten Monat1 comments

NPM-Scan v1.1.0: Four New Detectors for June 2026 Supply Chain Attacks

https://github.com/lateos-ai/npm-scan/blob/main/VALIDATION.md

1 comments

Detection validation on three real-world campaigns from June 2026: - @redhat-cloud-services Miasma (32 packages) - TanStack Mini Shai-Hulud (84 versions) - Axios Backdoor (transitive injection)

Detectors: Self-propagation, encrypted C2, transitive deps, maintainer compromise.