Shai-Hulud Supply-chain Campaign

Campaign

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

November 24, 2025

Last Seen

November 24, 2025

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (3)

Shai Hulud npm Worm Compromises Over 26,000 Repositories

Nov 24·32 sources

Shai-Hulud Malware Compromises 25K GitHub Repositories via npm Packages

Nov 24·4 sources

Shai-Hulud Malware Infects npm Packages, Compromising Thousands of Repositories

Nov 29·43 sources

Related Articles (2)

Shai-Hulud malware infects 500 npm packages, leaks secrets on GitHub

Databreaches·Nov 24

Shai-Hulud malware infects 500 npm packages, leaks secrets on GitHub

Bleepingcomputer·Nov 24

Related Entities

Supply Chain Attack Malware ENS Domains PostHog Zapier Shai-hulud GitHub Npm Bun Postman TruffleHog