Sha1-Hulud Supply Chain Attack Compromises 800+ npm Packages and Thousands of ...

Cyberpress • November 25, 2025

Any Priya is a cybersecurity reporter at Cyber Press, specializing in cyber attacks , dark web monitoring, data breaches, vulnerabilities, and malware.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Shai Hulud npm Worm Compromises Over 26,000 Repositories The Shai Hulud worm has compromised more than 26,000 public repositories in a supply chain attack. The attack targeted various npm packages, exploiting vulnerabilities that allowed unauthorized access to these repositories. Security experts have provided mandatory tips to mitigate the impact of this incident. 32 sources 62

Sha1-Hulud Supply Chain Attack Compromises 800+ npm Packages and Thousands of ...

The full story

Extracted Entities

Attack Types (1)

Malware (1)