Shai-Hulud Trinitite Hits @7nohe/openapi-react-query-codegen

The Trinitite variant of the Mini Shai-Hulud worm exploits a workflow vulnerability in the GitHub repository of the npm package @7nohe/openapi-react-query-codegen, a widely used TanStack Query codegen tool. By abusing pull-request comments, attackers can trigger npm publish commands to push malicious versions rapidly. The malware uses XOR-wrapped loaders and obfuscated binding.gyp files to bypass script execution restrictions. It targets credential theft from GitHub, npm, PyPI, RubyGems, cloud services, Vault, and Kubernetes, exfiltrating stolen data through GitHub commits. Persistence is achieved via systemd services, and a token revoke trap is included to wipe user directories if triggered. The campaign is attributed to the TeamPCP group, reusing their toolkit with new cryptographic keys and graffiti.

The worm compromises supply chain integrity by injecting malicious versions into a popular npm package, potentially affecting downstream users. Credential theft from multiple developer and cloud platforms can lead to broader compromise of developer environments and cloud infrastructure. Persistence mechanisms and destructive payloads increase the risk of data loss and prolonged unauthorized access. The rapid publication of malicious versions indicates high automation and potential for widespread impact. However, no known exploits in the wild have been reported yet.

No official patch or fix is currently documented for the underlying workflow vulnerability exploited in this campaign. Organizations should review and restrict GitHub workflow permissions to prevent unauthorized npm publish triggers via pull-request comments. Monitoring and restricting the use of systemd services for unauthorized persistence is advised. Credential rotation and revocation should be performed if compromise is suspected. Since this is a supply chain compromise, users of the affected npm package should verify package integrity and consider using package signing or lockfiles. Follow vendor and GitHub advisories for updates and remediation guidance.