+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Th (/showthread.php?tid=6315113)
Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Th - Stanley - Dec 4, 2025
Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Th
Multiple security vendors are sounding the alarm about a second wave of attacks targeting the npm registry in a manner that's reminiscent of the Shai-Hulud attack.
The new supply chain campaign, dubbed Sha1-Hulud, has compromised hundreds of npm packages, according to reports from Aikido, HelixGuard, JFrog, Koi Security, ReversingLabs, SafeDep, Socket, Step Security, and Wiz. The trojanized
https://thehackernews.com/2025/11/second-sha1-hulud-wave-affects-25000.html