Socket on Mythryl: “🚨 Active supply chain attack New Shai-Hulud

🚨 Active supply chain attack New Shai-Hulud–like npm worm (19+ packages, 2 aliases) stealing dev/CI secrets, injecting GitHub workflows, poisoning AI toolchains, and harvesting LLM API keys. Details → socket.dev/blog/sandwor... #NodeJS #JavaScript

socket.devSANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflow...An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

20/2/26, 5:57 pm6 reposts19 likes

Post