CERT24Over 600 npm packages compromised in a Mini Shai-Hulud campaignLoading data…
CERT24Threat Observatory
Period

Over 600 npm packages compromised in a Mini Shai-Hulud campaign

Threat actors published more than 600 malicious packages to the npm registry as part of a new Shai-Hulud supply-chain campaign. The affected packages steal secrets from developer and CI/CD environments and may propagate to additional packages.

← Back to intelligence

Over 600 npm packages compromised in a Mini Shai-Hulud campaign

Threat actors published more than 600 malicious packages to the npm registry as part of a new Shai-Hulud supply-chain campaign. The affected packages steal secrets from developer and CI/CD environments and may propagate to additional packages.