Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Shai-Hulud 2.0 Aftermath: Trends, Victimology and Impact

wiz.io | incident | #supply-chain | #incident-response | #npm | #shai-hulud | #wiz-research | #victimology

Summary

Wiz Research's Shai-Hulud 2.0 aftermath: infection trends including a December 1 spike of 200+ new repos in 12 hours, victimology, leaked-secret distribution and the community containment response.
Published
Collected

original ↗

Related coverage

  1. Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secrets (wiz.io)
  2. Snipping the Long Tail of Shai-Hulud 2.0 (wiz.io)
  3. Shai-Hulud: Ongoing Package Supply Chain Worm Delivering Data-Stealing Malware (wiz.io)
  4. Shai-Hulud Rises From the Dead after 111 days (aikido.dev)
  5. keyv and cacheable npm Package Hijacked in Supply Chain Attack (wiz.io)
  6. Miasma: Supply Chain Attack Targeting RedHat npm Packages (wiz.io)

back