#ai-tools

shai_hulululud npm Package Uses Prompt Injection and Token Flooding to Disrupt AI Malware Scanners

Socket identified shai_hulululud@1.0.48596 as a deliberately packed npm package that appears designed to probe or disrupt AI-assisted malware review with prompt-injection text, safety-triggering comments, context flooding, and obfuscated JavaScript.

Malware-Slop mouse5212-super-formatter npm Package Targets AI Workspaces

Snyk and OX tracked mouse5212-super-formatter as a malicious npm package published on 2026-05-26 and removed on 2026-05-27. The package should be treated as credential theft risk for AI-assisted workspaces, Claude/Cursor context files, GitHub tokens, npm tokens, and build logs.