Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft
Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft 2025-11-24 at 15:03 By Multiple security vendors are sounding the alarm about a second wave of attacks targeting the npm registry in a manner that’s reminiscent of the Shai-Hulud attack. The new supply chain campaign, dubbed Sha1-Hulud, has compromised hundreds of npm packages, according […]
Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft Read More »