[H4ckN3ws]Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft

[ThaHaka 0]

This is the hidden content, please

• Sign In
• or
• Sign Up

Multiple security vendors are sounding the alarm about a second wave of attacks targeting the npm registry in a manner that's reminiscent of the Shai-Hulud attack. The new supply chain campaign, dubbed Sha1-Hulud, has compromised hundreds of npm packages, according to reports from Aikido, HelixGuard, Koi Security, Socket, and Wiz. "The campaign introduces a new variant that executes malicious

This is the hidden content, please

• Sign In
• or
• Sign Up