Hackernews posts about Shai-Hulud

  1. Shai-Hulud: Whoever controls your package registry controls your pipeline (thenewstack.io)
    2 points by soltanov 3 days ago | 1 comments
  2. Shai-Hulud was the best thing to happen to supply chain security (www.aikido.dev)
    1 points by di 24 days ago | discuss
  3. Show HN: Husk a Local-first, open-source, security scanner (husk-security.dev)
    1 points by PatrikTang 24 days ago | discuss
  4. Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised (socket.dev)
    1233 points by jamesberthoty about 1 year ago | 1019 comments
  5. Shai-Hulud Returns: Over 300 NPM Packages Infected (helixguard.ai)
    1038 points by mrdosija 10 months ago | 775 comments
  6. Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library (semgrep.dev)
    465 points by j12y 5 months ago | 177 comments
  7. Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised (safedep.io)
    391 points by theanonymousone 4 months ago | 313 comments
  8. Shai Hulud launches second supply-chain attack (www.aikido.dev)
    352 points by birdculture 10 months ago | 23 comments
  9. Shai-Hulud compromised a dev machine and raided GitHub org access: a post-mortem (trigger.dev)
    262 points by nkko 9 months ago | 184 comments
  10. Keyv and friends compromised in active Shai-Hulud supply chain attack (www.aikido.dev)
    251 points by cimi_ about 2 months ago | 138 comments
  11. Post-mortem of Shai-Hulud attack on November 24th, 2025 (posthog.com)
    99 points by makepanic 10 months ago | 70 comments
  12. Live updates: Shai-hulud, the most dangerous NPM breach in history (www.koi.security)
    46 points by chha about 1 year ago | 3 comments
  13. Shai-Hulud-Style NPM Worm Hijacks CI Workflows and Poisons AI Toolchains (socket.dev)
    10 points by jicea 7 months ago | discuss
  14. Mini Shai-Hulud: Bun Payloads Hit SAP NPM Packages (www.stepsecurity.io)
    9 points by likhith190 5 months ago | discuss
  15. Shai-Hulud-Style NPM Worm Hijacks CI Workflows and Poisons AI Toolchains (socket.dev)
    8 points by feross 7 months ago | discuss
  16. Shai-Hulud and the risks of external dependencies (scotto.me)
    7 points by silcoon about 2 months ago | 1 comments
  17. Shai-Hulud: The novel self-replicating worm infecting NPM packages (www.sysdig.com)
    7 points by Bogdanp about 1 year ago | discuss
  18. Modern Developer Tools as Attack Surfaces: Lessons from Shai-Hulud (sitezwin.com)
    6 points by meel-hd 10 months ago | 2 comments
  19. Malware crew TeamPCP open-sources its Shai-Hulud worm on GitHub (www.theregister.com)
    6 points by pkaeding 4 months ago | 1 comments
  20. Malware crew TeamPCP open-sources its Shai-Hulud worm on GitHub (www.theregister.com)
    5 points by _____k 4 months ago | discuss
  21. Malware crew TeamPCP open-sources its Shai-Hulud worm on GitHub (www.theregister.com)
    5 points by birdculture 4 months ago | discuss
  22. New Shai-Hulud malware wave compromises 600 NPM packages (itnerd.blog)
    4 points by mooreds 4 months ago | 2 comments
  23. The Shai-Hulud 2.0 npm worm: analysis, and what you need to know (securitylabs.datadoghq.com)
    4 points by saikatsg 10 months ago | 2 comments
  24. Hermetic builds help contain Shai-Hulud attacks (flox.dev)
    4 points by mathewpregasen 3 months ago | discuss
  25. Shai-Hulud: Open Sourcing the Carnage (github.com)
    4 points by lionkor 4 months ago | discuss
  26. Mini Shai-Hulud in Intercom Package Spreads to Packagist Using Composer Plugin (semgrep.dev)
    4 points by j12y 5 months ago | discuss
  27. Shai Hulud strikes again – The golden path (www.aikido.dev)
    4 points by gpi 9 months ago | discuss
  28. GitHub Account Breach Fuels Shai-Hulud NPM Supply Chain Attack (www.esecurityplanet.com)
    3 points by doodlebugging about 2 months ago | 1 comments
  29. Mitigating Shai-Hulud Attacks with Hermetic Builds (flox.dev)
    3 points by ronef 3 months ago | 1 comments
  30. Detecting and removing dangerous secrets on dev workstations before Shai-Hulud (recyclebin.zip)
    3 points by ibobev 4 months ago | 1 comments
  31. The new Shai-Hulud worm threatens to wipe your machine if you revoke its token (cybersecurityreach.org)
    3 points by Leonardm 4 months ago | 1 comments
  32. Shai-Hulud Strikes Again, Again. (NPM Supply Chain Attack) (socket.dev)
    3 points by pvtmert 10 months ago | 1 comments
  33. Shai-Hulud rebuilt as a standalone stealer (bitbison.io)
    3 points by sbahra about 1 month ago | discuss