On September 8, 2025, a single phishing email triggered one of npm’s most damaging supply chain attacks, compromising 18 ...
Shai-Hulud is the third major supply chain attack targeting the NPM ecosystem after the s1ngularity attack and the recent compromise of Josh Junon (Qix), the maintainer of 18 NPM packages that have ...
The novel malware strain is being dubbed Shai-Hulud — after the name for the giant sandworms in Frank Herbert’s Dune novel ...
"After detecting several malicious Node Package Manager (NPM) packages in the public NPM registry, a third-party open source ...
Security researchers have identified at least 187 npm packages compromised in an ongoing supply chain attack. The coordinated ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback