1.tensorlake NPM package compromised with Shai Hulud wormblog | 2026-10-08 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #npm
2.Shai-Hulud Rises From the Dead after 111 daysblog | 2026-09-07 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #npm
3.Good riddance, TeamPCP. Now for the hard part.blog | 2026-08-27 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #threat-intelligence | #malware
4.Shai-Hulud was the best thing to happen to supply chain securityblog | 2026-08-24 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #npm | #aikido
5.keyv and cacheable npm Package Hijacked in Supply Chain Attackincident | 2026-08-04 11:25 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #malware
6.Keyv and friends compromised in active Shai-Hulud supply chain attackincident | 2026-08-04 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #incident-response | #malware
7.npm v12’s Biggest Security Change: From Implicit to Explicit Trustblog | 2026-06-18 14:15 | jfrog.com | Original ↗ | .md | #supply-chain | #npm | #javascript
8.npm v12 delivers one of the biggest security improvements in yearsblog | 2026-06-11 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #devsecops | #open-source
9.Shai-Hulud copycat campaign targets Python developers through PyPI typosquattingblog | 2026-06-09 00:00 | about.gitlab.com | Original ↗ | .md | #supply-chain | #malware | #credential-theft
10.Miasma: Supply Chain Attack Targeting RedHat npm Packagesincident | 2026-06-01 12:45 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #malware
11.Shai Hulud and Looking Into the Deep End of Supply Chain Mayhemblog | 2026-05-16 00:00 | abdulmhsblog.com | Original ↗ | .md | #supply-chain | #credential-theft | #npm
12.Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstackblog | 2026-05-12 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #malware
13.Is Shai-Hulud Back? Compromised Bitwarden CLI Contains a Self-Propagating npm Wormblog | 2026-04-23 00:00 | aikido.dev | Original ↗ | .md | #cloud | #supply-chain | #credential-theft
14.From Shai-Hulud to LiteLLM: Supply Chain Attackers Are Coming for Your Agentsblog | 2026-03-30 13:15 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #mcp
15.The Dependency Dilemma: Balancing Innovation Speed with Supply Chain Resilienceblog | 2026-03-11 14:49 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #resilience
16.How JFrog’s AI-Research Bot Found OSS CI/CD Vulnerabilities to Prevent Shai Hulud 3.0incident | 2026-03-05 21:27 | jfrog.com | Original ↗ | .md | #ai-security | #rce | #supply-chain
17.AI Security Testing Is the Maturity Milestone for Modern Organizationsblog | 2026-01-15 21:06 | hackerone.com | Original ↗ | .md | #ai-security | #prompt-injection | #jailbreak
18.JFrog Achieves AWS Security Competencyblog | 2026-01-14 11:54 | jfrog.com | Original ↗ | .md | #ai-security | #cloud | #supply-chain
19.Snipping the Long Tail of Shai-Hulud 2.0blog | 2025-12-30 15:21 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #npm
20.Shai-Hulud 2.0 Aftermath: Trends, Victimology and Impactincident | 2025-12-01 17:52 | wiz.io | Original ↗ | .md | #supply-chain | #incident-response | #npm
21.Shai-Hulud npm supply chain attack – new compromised packages detectedincident | 2025-11-24 19:03 | jfrog.com | Original ↗ | .md | #ai-security | #cloud | #supply-chain
22.Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secretsincident | 2025-11-24 10:27 | wiz.io | Original ↗ | .md | #supply-chain | #secrets | #malware
23.Shai-Hulud 2.0: What Security Leaders Need to Do Nowblog | 2025-11-26 15:05 | hackerone.com | Original ↗ | .md | #supply-chain | #secrets | #malware
24.Shai-Hulud: Ongoing Package Supply Chain Worm Delivering Data-Stealing Malwareblog | 2025-09-16 14:04 | wiz.io | Original ↗ | .md | #supply-chain | #secrets | #malware