Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secrets

wiz.io·Nov 24

This story is reported by wiz.io. Read what other outlets are saying below, then open the original report for full details.

Full coverage

1

"Shai-Hulud" Worm Compromises npm Ecosystem in Supply Chain Attack (Updated November 26)

Unit 42·Sep 17

2

Shai-Hulud npm Supply Chain Attack

wiz.io·Sep 16

3

Shai Hulud 2.0 Strikes Again: Malware Supply-Chain Attack Hits Zapier & ENS Domains

Aikido Security·Nov 24

4

Shai-Hulud 2 Malware Campaign Targets GitHub and Cloud Credentials Using Bun Runtime

Endor Labs·Nov 24

5

Top research posts of 2025

wiz.io·Jan 30

6

WizOS: Secured Images Powered by AI

wiz.io·Dec 1

7

SCA Implementation: A Step-by-Step Framework for 2026

wiz.io·Mar 23

8

3 OAuth TTPs Seen This Month — and How to Detect Them with Entra ID Logs

wiz.io·Nov 27