Shai-Hulud Campaign

Campaign

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

November 25, 2025

Last Seen

November 29, 2025

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (2)

Shai Hulud npm Worm Compromises Over 26,000 Repositories

Nov 24·32 sources

Shai-Hulud Malware Infects npm Packages, Compromising Thousands of Repositories

Nov 29·43 sources

Related Articles (2)

PostHog admits Shai-Hulud 2.0 was its biggest ever security bungle

Theregister·Nov 29

The Second Coming of Shai-Hulud: Attackers Innovating on npm

Sonatype·Nov 25

Related Entities

Malware Worm Supply Chain Attack Trojan Sha1-Hulud Campaign AsyncAPI ENS Domains PostHog Zapier Sha1-Hulud Shai-hulud 2.0 GitHub