scan-shai-hulud

A fast, zero-dependency Bash scanner to detect whether your machine is affected by the CVE-2026-45321 "Mini Shai-Hulud" supply chain attack.

On May 11, 2026, over 170 npm packages and 2 PyPI packages across TanStack, Mistral AI, UiPath, OpenSearch, and Guardrails AI were simultaneously poisoned. The malicious payload steals AWS credentials, GitHub tokens, npm tokens, Vault secrets, and SSH keys — and includes a self-propagating worm that spreads through CI/CD pipelines.

Quick Start

curl -fsSL https://raw.githubusercontent.com/qi-scape/scan-shai-hulud/main/scan-shai-hulud.sh | bash

Or clone and run:

git clone https://github.com/qi-scape/scan-shai-hulud.git
cd scan-shai-hulud
chmod +x scan-shai-hulud.sh
./scan-shai-hulud.sh

Usage

# Scan current directory + system-wide persistence checks
./scan-shai-hulud.sh

# Scan a specific project
./scan-shai-hulud.sh ~/my-project

# Deep scan across entire home directory
./scan-shai-hulud.sh --full

What It Checks

The scanner runs 8 steps:

Affected Packages

170 npm packages across 15 scopes:

• @tanstack (42 packages) — router ecosystem only (react-router, vue-router, solid-router, router-core, etc.)
• @uipath (65 packages) — full automation tooling suite
• @squawk (20 packages) — aviation data packages
• @tallyui (10 packages) — POS/connector packages
• @mistralai (3 packages) — mistralai, mistralai-azure, mistralai-gcp
• @opensearch-project (1 package) — opensearch
• @beproduct, @draftauth, @draftlab, @supersurkhet, @taskflow-corp, @tolka, @mesadev, @ml-toolkit-ts, @dirigible-ai
• Unscoped: agentwork-cli, cmux-agent-mcp, cross-stitch, , , , , , ,

2 PyPI packages:

• mistralai==2.4.6
• guardrails-ai==0.10.1

C2 Infrastructure

If You Find Something

If the scanner reports CRITICAL findings:

1. Rotate all credentials reachable from the affected machine — AWS keys, GitHub tokens (ghp_*, gho_*, ghs_*), npm tokens, Vault tokens, SSH keys, Kubernetes service account tokens
2. Remove malicious packages — npm cache clean --force && rm -rf node_modules && npm install
3. Remove persistence — launchctl unload ~/Library/LaunchAgents/com.user.gh-token-monitor.plist
4. Block C2 domains at DNS/proxy level
5. Audit GitHub Actions runs since 2026-05-11T19:20Z
6. Check for unauthorized npm publishes — npm access ls-packages

References

• CVE-2026-45321 — CVSS 9.6 Critical
• GHSA-g7cv-rxg3-hmpx — GitHub Advisory
• TanStack Postmortem
• Aikido: Mini Shai-Hulud Is Back
• SafeDep: Mass Supply Chain Attack
• Snyk: TanStack Compromised
• The Hacker News Coverage

Requirements

• Bash 4+ (macOS ships with 3.x but the script is compatible)
• Standard UNIX utilities (find, grep, shasum)
• Optional: mdfind (macOS Spotlight, used for faster file search)
• Optional: npm, pip (for package/token checks)
• Optional: git (for repository checks)
• Optional: lsof (for network connection checks)

License

MIT