---
id: 6922
title: "Snipping the Long Tail of Shai-Hulud 2.0"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/snipping-the-long-tail-of-shai-hulud-2-0"
published_at: "2025-12-30T15:21:30Z"
tags: ["cloud", "supply-chain", "npm", "shai-hulud", "credential-rotation", "wiz-research", "openvsx"]
phying_url: "https://phying.com/item/6922"
lang: en
---

# Snipping the Long Tail of Shai-Hulud 2.0

## Summary

Wiz Research on Shai-Hulud 2.0's long tail: infections ran 100-200 repos/day, 90%+ via a zombie OpenVSX extension; a clean release cut it to a handful, while leaked secrets remain unrotated.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2025-12-30T15:21:30Z
- **Original:** https://www.wiz.io/blog/snipping-the-long-tail-of-shai-hulud-2-0
- **Phying News:** https://phying.com/item/6922