“Shai-Hulud” worm

The “Shai-Hulud” worm is specifically engineered to exploit the Node Package Manager (NPM) ecosystem.  The worm’s attack chain includes credential theft, data exfiltration, establishing persistence on compromised systems, self-replication across NPM environments and unauthorized exposure of private GitHub repositories.  Its propagation leverages NPM package dependencies and may exploit weak authentication or misconfigured access controls to maximize its reach and impact.

Following a thorough assessment, no Canon Production Printing products have been found to be affected.