Skip to content
Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secrets
wiz.io | incident | #supply-chain | #secrets | #malware | #github | #npm | #shai-hulud | #wiz-research
Summary
Wiz Research's first Shai-Hulud 2.0 report: ~700 trojanized npm packages (Zapier, ENS, PostHog, Postman), 25,000+ repos leaking stolen secrets, and a preinstall variant widening the blast radius.
- Published
- Collected