Hackernews posts about Shai-Hulud

RSS feed for Shai-Hulud

01
newShai-Hulud worm makes jump to AI infrastructure with Tensorlake compromisewww.theregister.com
▲ 5fork-bomber 29d discuss
02
newTensorlake is compromised using mini Shai Huludsafedep.io
▲ 2Sudhanshu231020 29d discuss
03
newThe Kessler Syndrome (where blowups multiply exponentially) applied to software
▲ 7spenvo 16d discuss
04
newShai-Hulud malware attack: Tinycolor and over 40 NPM packages compromisedsocket.dev
▲ 1233jamesberthoty 417d 💬 1019
05
newShai-Hulud Returns: Over 300 NPM Packages Infectedhelixguard.ai
▲ 1038mrdosija 348d 💬 775
06
newShai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Librarysemgrep.dev
▲ 465j12y 190d 💬 177
07
newMini Shai-Hulud Strikes Again: 314 npm Packages Compromisedsafedep.io
▲ 391theanonymousone 172d 💬 313
08
newShai Hulud launches second supply-chain attackwww.aikido.dev
▲ 352birdculture 347d 💬 23
09
newShai-Hulud compromised a dev machine and raided GitHub org access: a post-mortemtrigger.dev
▲ 262nkko 328d 💬 184
10
newKeyv and friends compromised in active Shai-Hulud supply chain attackwww.aikido.dev
▲ 251cimi_95d 💬 138
11
newPost-mortem of Shai-Hulud attack on November 24th, 2025posthog.com
▲ 99makepanic 345d 💬 70
12
newLive updates: Shai-hulud, the most dangerous NPM breach in historywww.koi.security
▲ 46chha 416d 💬 3
13
newShai-Hulud-Style NPM Worm Hijacks CI Workflows and Poisons AI Toolchainssocket.dev
▲ 10jicea 258d discuss
14
newMini Shai-Hulud: Bun Payloads Hit SAP NPM Packageswww.stepsecurity.io
▲ 9likhith190 191d discuss
15
newShai-Hulud-Style NPM Worm Hijacks CI Workflows and Poisons AI Toolchainssocket.dev
▲ 8feross 259d discuss
16
newShai-Hulud and the risks of external dependenciesscotto.me
▲ 7silcoon 100d 💬 1
17
newShai-Hulud: The novel self-replicating worm infecting NPM packageswww.sysdig.com
▲ 7Bogdanp 415d discuss
18
newModern Developer Tools as Attack Surfaces: Lessons from Shai-Huludsitezwin.com
▲ 6meel-hd 343d 💬 2
19
newMalware crew TeamPCP open-sources its Shai-Hulud worm on GitHubwww.theregister.com
▲ 6pkaeding 177d 💬 1
20
newMalware crew TeamPCP open-sources its Shai-Hulud worm on GitHubwww.theregister.com
▲ 5_____k 177d discuss
21
newMalware crew TeamPCP open-sources its Shai-Hulud worm on GitHubwww.theregister.com
▲ 5birdculture 177d discuss
22
newNew Shai-Hulud malware wave compromises 600 NPM packagesitnerd.blog
▲ 4mooreds 165d 💬 2
23
newThe Shai-Hulud 2.0 npm worm: analysis, and what you need to knowsecuritylabs.datadoghq.com
▲ 4saikatsg 345d 💬 2
24
newHermetic builds help contain Shai-Hulud attacksflox.dev
▲ 4mathewpregasen 134d discuss
25
newShai-Hulud: Open Sourcing the Carnagegithub.com
▲ 4lionkor 178d discuss
26
newMini Shai-Hulud in Intercom Package Spreads to Packagist Using Composer Pluginsemgrep.dev
▲ 4j12y 190d discuss
27
newShai Hulud strikes again – The golden pathwww.aikido.dev
▲ 4gpi 313d discuss
28
newGitHub Account Breach Fuels Shai-Hulud NPM Supply Chain Attackwww.esecurityplanet.com
▲ 3doodlebugging 94d 💬 1
29
newMitigating Shai-Hulud Attacks with Hermetic Buildsflox.dev
▲ 3ronef 136d 💬 1
30
newDetecting and removing dangerous secrets on dev workstations before Shai-Huludrecyclebin.zip
▲ 3ibobev 154d 💬 1
31
newThe new Shai-Hulud worm threatens to wipe your machine if you revoke its tokencybersecurityreach.org
▲ 3Leonardm 179d 💬 1
32
newShai-Hulud Strikes Again, Again. (NPM Supply Chain Attack)socket.dev
▲ 3pvtmert 347d 💬 1
33
newShai-Hulud rebuilt as a standalone stealerbitbison.io
▲ 3sbahra 86d discuss