Get the latest tech news

Post-mortem of Shai-Hulud attack on November 24th, 2025


At 4:11 AM UTC on November 24th, a number of our SDKs and other packages were compromised, with a malicious self-replicating worm - Shai-Hulud 2.…

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of post

post

Photo of shai-hulud

shai-hulud

Photo of Hulud attack

Hulud attack

Related news:

News photo

Shai-Hulud malware infects 500 npm packages, leaks secrets on GitHub

News photo

Shai-Hulud worm returns, belches secrets to 25K GitHub repos

News photo

Shai-Hulud Returns: Over 300 NPM Packages Infected