27 Malicious Npm Phishing Packages Steal
Rad More: buff.ly/TNtJ2id

#NPMSupplyChain #MaliciousPackages #PhishingCampaign #DeveloperSecurity #OpenSourceAbuse #CredentialTheft #CriticalInfrastructure #ThreatResearch

Self-Replicating Worm Compromising Hundreds of NPM Packages An ongoing supply chain attack dubbed "Shai-Hulud" has compromised hundreds of packages in the npm repository with a self-replicating worm that steals secrets like API key, tokens, and cloud…

A self-replicating worm named Shai-Hulud is compromising hundreds of npm packages—stealing secrets and spreading via GitHub automation. Open source trust is under siege. 🐛📦 #Worm #NPMSupplyChain