malicious-packages database. There is no coordinated-disclosure window (the maintainer is the attacker). codelake never stores raw payloads — only the detection rule, file:line, and IOCs.
@or-sdk/discovery — malicious npm package (Shai-Hulud worm), independently detected and OSV-corroborated
@or-sdk/discovery is a malicious npm package that codelake Research independently detected during automated supply-chain scanning, corroborated by MAL-2026-11689 in OSV. It was compromised by the Shai-Hulud self-replicating npm worm, which steals developer and cloud credentials on install and propagates through stolen publish tokens.
This package was compromised as part of the Shai-Hulud self-replicating npm supply-chain worm. On install the injected payload harvests developer and CI secrets — npm and GitHub tokens plus cloud credentials (AWS / GCP / Azure) — using embedded TruffleHog-style secret scanning, exfiltrates them (including to attacker-controlled GitHub repositories), and then reuses stolen npm publish tokens to inject itself into other packages the victim maintains, propagating automatically.
Affected version(s): 1.12.2, 1.12.3.
codelake's per-ecosystem scanners flagged the specimen and the AI-triage judge classified it malicious (recorded signal: shai-hulud,worm,wiz-cross-verified,dynamic-exec, confidence 1.00).
This is an independent detection by codelake's own scanners and AI-triage pipeline; it is corroborated by MAL-2026-11689 in OSV (codelake was not necessarily the first public reporter for this record).
All analysis is performed at the indicator level on extracted source only — codelake never executes specimens and stores only the detection rule, indicators and analysis, never raw payloads.
Detected independently by codelake Research · automated per-ecosystem supply-chain scanning + AI-triage, verified at the indicator level on extracted source (no execution). Corroborated by MAL-2026-11689 in OSV. codelake stores only the detection rule, indicators and analysis, never raw payloads.