Skip to content
Shai-Hulud 2.0: What Security Leaders Need to Do Now
hackerone.com | blog | #supply-chain | #secrets | #malware | #credential-theft | #npm | #ci-cd | #javascript | #worm | #shai-hulud
Summary
Shai-Hulud 2.0 is a self-replicating npm worm stealing secrets from dev and CI/CD environments; with 1,000+ packages and 27,000+ repos hit, rotate credentials and disable lifecycle scripts.
- Published
- Collected