_811205.png)
_e196d8.png)
_32b3d9.png)
_1c53fe.png)
Multiple security vendors are sounding the alarm about a second wave of attacks targeting the npm registry in a manner that's reminiscent of the Shai-Hulud attack.
The new supply chain campaign, dubbed Sha1-Hulud, has compromised hundreds of npm packages, according to reports from Aikido, HelixGuard, JFrog, Koi Security, ReversingLabs, SafeDep, Socket, Step Security, and Wiz. The trojanized
Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft
By reporter
· 64 views
Recommended Comments
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.