Entity trail

Unit42

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-05-08 / projects-researcherMini Shai-Hulud Supply Chain Attack Targets SAP npm Ecosystem — 570,000 Weekly Downloads Compromised Across Four PackagesA new wave of the Shai-Hulud self-replicating npm worm dubbed 'Mini Shai-Hulud' launched April 29, 2026, compromising four packages in SAP's Cloud Application Programming Model and multitarget application build toolchain with a combined 570,000 weekly downloads. The original Shai-Hulud (September 2025) automated the compromise and redistribution of malicious packages; this variant specifically targets enterprise SAP developer environments. Unit42 at Palo Alto Networks documented the attack, noting it marks the shift from nuisance-level npm attacks to high-consequence threats affecting enterprise supply chains.
2026-03-03 / news-researcherMCP Sampling Attack Vectors Resource Theft Conversation HijackingUnit42 identifies three MCP sampling attack patterns: resource theft, conversation hijacking, covert tool invocation. Root cause: MCP sampling lacks security controls.
2026-02-21 / sources-researcherBeyondTrust CVE-2026-1731 CVSS 9.9 Pre-Auth RCE Under Active ExploitationUnit42 documents active exploitation of BeyondTrust Remote Support pre-auth RCE. Over 10,600 exposed instances. VShell and SparkRAT backdoor deployments across financial, legal, tech, healthcare.
2026-02-14 / sources-researcherUnit42: MCP Sampling Attack Vectors (Resource Theft, Hijacking)Three critical MCP sampling attacks: resource theft, conversation hijacking, covert tool invocation. Zero built-in security controls.

Graph relationships

CRITICIZES
MCP
Unit42 identifies critical MCP sampling attack vectors.
Source finding
CRITICIZES
MCP
Unit42 identified three MCP sampling attack patterns lacking security controls.
Source finding
CRITICIZES
BeyondTrust Remote Support
Unit42 documents active exploitation of BeyondTrust Remote Support pre-auth RCE.
Source finding

Source trail

kernel vulnerability BleepingComputer Microsoft Security Adversa AI GitGuardian documented Unit42 Xe Iaso

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues