---
id: 6943
title: "Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secrets"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attack"
published_at: "2025-11-24T10:27:46Z"
tags: ["supply-chain", "secrets", "malware", "github", "npm", "shai-hulud", "wiz-research"]
phying_url: "https://phying.com/item/6943"
lang: en
---

# Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secrets

## Summary

Wiz Research's first Shai-Hulud 2.0 report: ~700 trojanized npm packages (Zapier, ENS, PostHog, Postman), 25,000+ repos leaking stolen secrets, and a preinstall variant widening the blast radius.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2025-11-24T10:27:46Z
- **Original:** https://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attack
- **Phying News:** https://phying.com/item/6943