Mini Shai-Hulud returns, compromising hundreds of npm packages (opens in new tab)

Covers 2 stories including Active Supply Chain Attack Compromises @antv Packages on npmCovered by kite.kagi.com, Metacurity

Another malware wave is washing through open-source software repos, stealing publishing tokens, installing OS‑level backdoors and persisting in developer tools and CI pipelines. The post Mini Shai-Hulud returns, compromising hundreds of npm packages appeared first on CyberScoop.

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 2 articles

Metacurity·

GitHub says malicious VS Code extension compromised 3,800 internal repositories

In other languages

kite.kagi.com·

Covered in 2 articles

GitHub says malicious VS Code extension compromised 3,800 internal repositories

In other languages

Mini Shai-Hulud 웜, 수백 개의 npm 패키지 감염