Typosquatted npm packages used to steal cloud and CI/CD secrets (opens in new tab)

The Mini Shai-Hulud campaign used malicious npm packages to target cloud and CI/CD credentials across developer environments. This report details the attack chain, detection opportunities, and mitigation guidance to help organizations identify and disrupt related activity. The post appeared first on .