Defensive static analysis and detection engineering for the 2026 Shai-Hulud npm supply-chain campaign: Sigma/YARA rules, IOCs, ATT&CK mapping, and defender guidance.
ioc incident-response threat-hunting malware-analysis sigma yara devsecops threat-intelligence bun blue-team mitre-attack nodejs-security detection-engineering supply-chain-security ci-cd-security github-actions-security npm-security shai-hulud npm-supply-chain shai-hulud-2026
-
Updated
Aug 4, 2026 - YARA