Hackernews posts about Shai-Hulud
- Shai-Hulud Returns: Over 300 NPM Packages Infected (helixguard.ai)
- Shai Hulud launches second supply-chain attack (www.aikido.dev)
- Post-mortem of Shai-Hulud attack on November 24th, 2025 (posthog.com)
- Live updates: Shai-hulud, the most dangerous NPM breach in history (www.koi.security)
- Shai-Hulud: The novel self-replicating worm infecting NPM packages (www.sysdig.com)
- The Shai-Hulud 2.0 npm worm: analysis, and what you need to know (securitylabs.datadoghq.com)
- Shai Hulud strikes again – The golden path (www.aikido.dev)
- PyPI and Shai-Hulud: Staying Secure Amid Emerging Threats (blog.pypi.org)
- Shai-Hulud Supply-Chain Scanner (Rust) (github.com)
- Big attack on NPM – Shai-Hulud 2.0 (about.gitlab.com)
- Shai-Hulud malware infects 500 NPM packages, leaks secrets on GitHub (www.bleepingcomputer.com)
- Self-Replicating NPM Package Supply Chain Worm 'Shai Hulud' (www.aikido.dev)
- How Replit Is Protecting You from the "Shai-Hulud" Worm (blog.replit.com)
- Why Scanners Fail in Practice: Lessons from the Shai-Hulud Attacks on NPM (www.codecentric.de)
- The most dangerous NPM breach in History (www.koi.security)