Read news on shai-hulud with our app.
Read more in the app
Shai-Hulud compromised a dev machine and raided GitHub org access: a post-mortem
Shai-Hulud 2.0 NPM malware attack exposed up to 400,000 dev secrets
Post-mortem of Shai-Hulud attack on November 24th, 2025
Shai-Hulud malware infects 500 npm packages, leaks secrets on GitHub
Shai-Hulud worm returns, belches secrets to 25K GitHub repos
Shai-Hulud Returns: Over 300 NPM Packages Infected
Live Updates: Shai-Hulud, the Most Dangerous NPM Breach in History
.png)