Snipping the Long Tail of Shai-Hulud 2.0
wiz.io | blog | #cloud | #supply-chain | #npm | #shai-hulud | #credential-rotation | #wiz-research | #openvsx
Summary
Wiz Research on Shai-Hulud 2.0's long tail: infections ran 100-200 repos/day, 90%+ via a zombie OpenVSX extension; a clean release cut it to a handful, while leaked secrets remain unrotated.
- Published
- Collected
Skip to content