Ensdomains is identified as a target in a recent operation attributed to the threat actor Shai Hulud, with Zapier also cited as a victim.
Overview
Ensdomains is identified as a target in a recent operation attributed to the threat actor Shai Hulud, with Zapier also cited as a victim. The report frames Ensdomains as part of a broader focus on cloud/SaaS platforms and domain-related services, highlighting the ongoing risk to automation workflows and domain infrastructure in cybersecurity.
Related Threat Clusters
-
Shai Hulud npm Worm Compromises Over 26,000 Repositories
The Shai Hulud worm has compromised more than 26,000 public repositories in a supply chain attack. The attack targeted various npm packages, exploiting vulnerabilities that allowed unauthorized access to these…
32 articles · Updated November 24, 2025 -
Shai-Hulud Malware Infects npm Packages, Compromising Thousands of Repositories
A new wave of the Shai-Hulud malware has compromised nearly 500 npm packages, affecting over 26,000 GitHub repositories. This self-replicating worm, which targets developers' credentials and secrets, has been linked to…
43 articles · Updated November 29, 2025
Recent Intelligence Reports
- Shai Hulud strikes again, hitting Zapier, Ensdomains — Aikido.Dev · November 24, 2025