Shai-Hulud 2.0 Supply Chain Attack Targets Cloud Ecosystems

First seen 9 Dec 2025, 23:42 UTC • Blogs.Microsoft

•33

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The Shai-Hulud 2.0 supply chain attack involved the malicious modification of hundreds of publicly available packages, impacting developer environments, CI/CD pipelines, and cloud-connected workloads. This attack aimed to harvest credentials and configuration secrets, marking a significant compromise in the cloud-native ecosystem.

How this analysis works

Continue Reading

Checkmarx Jenkins Plugin Compromised by TeamPCP Malware Attack Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages Shai Hulud npm Worm Compromises Over 26,000 Repositories OpenAI Faces Supply Chain Attack via TanStack npm Library Shai-Hulud 2.0 Malware Worm Targets Node Package Ecosystem ShadowPad Attack Exploits WSUS Vulnerability Affecting 25K+ npm Repos

Shai-Hulud 2.0 Supply Chain Attack Targets Cloud Ecosystems

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading