"As a new and significantly more aggressive wave of npm supply chain malware, Shai-Hulud 2 combines stealthy execution, ...

The attackers have learned from their mistakes and have now developed a more aggressive version of the worm. It has already ...

Researchers uncover more than 80,000 leaked passwords, keys, and sensitive files exposed on popular online code formatting ...

The Shai-Hulud supply chain attack campaign, responsible for compromising hundreds of CrowdStrike’s NPM packages in September ...

Approximately 640 NPM packages have been infected with a new variant of the Shai-Hulud self-replicating worm in a fresh wave of attacks.

Hundreds of trojanized versions of well-known packages such as Zapier, ENS Domains, PostHog, and Postman have been planted in ...

A new iteration of the Shai-Hulud malware that ran through npm repositories in September is faster, more dangerous, and more ...

While the September 2025 Shai-Hulud attack focused primarily on credential harvesting and self-propagation, this new variant ...