Post

We have updated this list to include more than 500 packages and 700+ affected versions, as well as a technical analysis of the attack. socket.dev/blog/shai-hu.... cc: @campuscodi.risky.biz @typescript.fm @bleepingcomputer.com @theregister.com

socket.devShai Hulud Strikes Again (v2) - SocketAnother wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.

Feross@feross.bsky.social

Here we go again

24/11/25, 5:19 pm15 reposts21 likes

No replies yet.