Ledger / 14 Sep 2025
Shai-Hulud npm worm: malicious bash script likely LLM-generated
Strong
Unit 42 assesses LLM use with moderate confidence from comments and emojis in the script.
Unit 42 judged that the worm's bash payload was written with LLM help, based on stylistic artifacts. It framed the worm as following s1ngularity's weaponization of AI tools.
“Unit 42 also assesses with moderate confidence that an LLM was used to generate the malicious bash script, based on inclusion of comments and emojis.”Unit 42, Palo Alto Networks
Sources
- Shai-Hulud Worm Compromises npm Ecosystem in Supply Chain AttackUnit 42, Palo Alto Networks · 17 Sep 2025 · primary source
- Date
- 14 Sep 2025
- Disclosed
- 15 Sep 2025
- Actor
- Unknown (Shai-Hulud) (unknown), as attributed by Unit 42, Palo Alto Networks
- Targets
- npm maintainers and packages, wide ecosystem
- What the AI did
- Malware dev, Supply chain
- Model
- unspecified LLM
- Model family
- Unspecified
- Model basis
- inferred
- Autonomy
- assist
- Outcome
- Self-replicating worm stole credentials and republished infected packages.