Massive npm Supply-Chain Attack: Shai-Hulud Worm Infects Over 180 Packages
A new, alarming software supply-chain attack dubbed ‘Shai-Hulud’ has been uncovered targeting the JavaScript npm ecosystem. Researchers from several security firms, including Palo Alto Networks Unit 42, Wiz, Sysdig, and Sonatype, confirm this is one of the most serious compromises…
