Securitysystemsnews

Shai-Hulud 2.0 Malware Worm Targets Node Package Ecosystem

First seen 12 Dec 2025, 18:53 UTC • Securitysystemsnews

•33.2

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The Shai-Hulud 2.0 malware worm was released, exploiting vulnerabilities in the Node Package ecosystem. Developers are currently addressing the fallout from this incident, which has affected numerous applications relying on open-source components. The malware's rapid spread highlights the risks associated with open-source software management.

How this analysis works

Continue Reading

Checkmarx Jenkins Plugin Compromised by TeamPCP Malware Attack Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages Shai Hulud npm Worm Compromises Over 26,000 Repositories OpenAI Faces Supply Chain Attack via TanStack npm Library Shai-Hulud 2.0 Supply Chain Attack Targets Cloud Ecosystems ShadowPad Attack Exploits WSUS Vulnerability Affecting 25K+ npm Repos

Shai-Hulud 2.0 Malware Worm Targets Node Package Ecosystem

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading