Open Source · · 1 day

Taskflow Corp npm package carried Shai-Hulud

JFrog listed 1 Taskflow Corp npm package in the May 2026 Shai-Hulud wave. This record scopes those artifacts to their own official distribution surface.

Part of Shai-Hulud hits npm and PyPI campaign

Taskflow Corp appeared in the May 2026 Shai-Hulud wave through @taskflow-corp/cli. JFrog listed six affected npm releases, all within the campaign's May 11-12 package-publishing window.

A CLI package is a direct route into developer and automation environments. It can be installed globally, pulled into CI images, or run during build setup, which puts it near npm tokens, GitHub credentials, cloud configuration, and local secrets. That is the environment Shai-Hulud was built to mine.

This record keeps the Taskflow Corp package separate from the aggregate campaign count. The campaign page explains the shared loader and self-propagation machinery; this page preserves the package name, version set, registry URLs, and dates for inventory and cleanup.

A matching install should be handled as an install-time compromise, not merely a vulnerable library import. Any host or runner that resolved the affected @taskflow-corp/cli versions should have its credentials rotated and its subsequent package-publishing activity reviewed.

Notes

  • The network and payload indicators are the campaign-level set JFrog published for this wave, not observations of this package's own bytes. They identify the wave's infrastructure and persistence, and are recorded here so each affected distribution surface carries them. Where a record also lists indicators read from an acquired sample, those are marked as such.
  • Minimal campaign-linked record created to keep Shai-Hulud package evidence scoped by vendor, organization, maintainer account, or package distribution surface.

Appendix · Affected releases

@taskflow-corp/cli npm
0.1.29 sha256 706592ab…cf109a76 download unavailable
0.1.28 sha256 4036f66a…6bcaaa8c download unavailable
0.1.27 sha256 155a792a…5093c9c9 download unavailable
0.1.26 sha256 8172610a…2dbe0dec download unavailable
0.1.25 sha256 e9826b93…84b6081c download unavailable
0.1.24 sha256 3953cda4…8e6b6793 download unavailable

Indicators

  • file_sha256npm payload 29c729852fce5a53e30a1541d9fec79c915b2e13f1eda94a5978cf0aae0d88d9
  • file_sha256npm payload 2ec78d556d696e208927cc503d48e4b5eb56b31abc2870c2ed2e98d6be27fc96
  • file_sha256npm payload ab4fcadaec49c03278063dd269ea5eef82d24f2124a8e15d7b90f2fa8601266c
  • file_sha256npm payload d4a2086ea18f5e39cd867b8b06918a524eabb21d45ea98aad07357b98173458a
  • urlhttps://filev2.getsession.org/file/
  • domainseed1.getsession.org
  • domainseed2.getsession.org
  • domainseed3.getsession.org
  • domainapi.masscan.cloud
  • file~/.local/bin/gh-token-monitor.sh
  • file~/.config/systemd/user/gh-token-monitor.service
  • file~/Library/LaunchAgents/com.user.gh-token-monitor.plist
  • file~/.config/gh-token-monitor/
  • stringShai-Hulud: Here We Go Again
  • stringPUSH UR T3MPRR
  • stringFIRESCALE
  • commit_authorclaude@users.noreply.github.com

References

  1. Shai-Hulud: Here We Go Again - Worm by TeamPCP Hits NPM and PyPIresearch.jfrog.com
  2. TanStack npm Packages Compromised in Ongoing Mini Shai-Hulud Supply Chain Attack - Socketsocket.dev
  3. Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack - Aikidoaikido.dev
  4. Socket retained file listing for @taskflow-corp/cli 0.1.24socket.dev
  5. Socket retained file listing for @taskflow-corp/cli 0.1.25socket.dev
  6. Socket retained file listing for @taskflow-corp/cli 0.1.26socket.dev
  7. Socket retained file listing for @taskflow-corp/cli 0.1.27socket.dev
  8. Socket retained file listing for @taskflow-corp/cli 0.1.28socket.dev
  9. Socket retained file listing for @taskflow-corp/cli 0.1.29socket.dev

Source record: oss/attacks/shai-hulud-taskflow-corp-npm/meta.yaml