https://securitylabs.datadoghq.com/articles/shai-hulud-2.0-npm-worm/
The Shai-Hulud 2.0 npm worm: analysis, and what you need to know | Datadog Security Labs
Learn more about the Shai-Hulud 2.0 npm worm.
https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains
Shai Hulud 2.0 Strikes Again: Malware Supply-Chain Attack Hits Zapier & ENS Domains
Mar 17, 2026 - The threat actor behind “Shai Hulud 2.0” launched a new malware campaign compromising the supply chain of Zapier, ENS Domains and more — exposing secrets,...
https://securitybridge.com/blog/a-mini-shai-hulud-has-appeared-when-the-npm-supply-chain-reaches-into-sap/
Mini Shai-Hulud: npm Supply Chain reaches into SAP security!
Apr 30, 2026 - On April 29, 2026, four official npm packages in the SAP ecosystem were compromised, briefly spreading credential-stealing malware to developer environments.
shai huludsupply chainmininpmreaches
https://thehackernews.com/2025/11/second-sha1-hulud-wave-affects-25000.html
Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft
Security vendors warn Sha1-Hulud has hijacked 25,000+ GitHub repos via npm packages, stealing cloud credentials or wiping dev home directories.
https://www.pcgamer.com/games/mmo/shai-hulud-defanged-in-dune-awakening-your-vehicles-are-no-longer-permanently-lost-if-a-sandworm-eats-them/
Shai Hulud defanged: In Dune: Awakening, your vehicles are no longer permanently lost if a sandworm...
Oct 7, 2025 - A new patch lets you recover your swallowed rides, though there's a catch. And a cost.
https://www.instructables.com/Dune-Shai-Hulud-Sandworm-Koinobori/
Dune Shai Hulud Sandworm Koinobori : 5 Steps (with Pictures) - Instructables
Dune Shai Hulud Sandworm Koinobori: Like a fish out of water, make your own custom koinobori. Koinobori are windsocks or streamers that are attached to lines...
shai huludwith picturesdunesandwormkoinobori
https://helixguard.ai/blog/malicious-sha1hulud-2025-11-24/
Shai-Hulud Returns: Over 1K NPM Packages and 27K+ Github Repos infected via Fake Bun Runtime Within...
Over 1,000 NPM packages were infected using the same method as the previous attack, infecting with a fake Bun runtime. The attacker leveraged the `preinstall`...
https://blog.pypi.org/posts/2025-11-26-pypi-and-shai-hulud/
PyPI and Shai-Hulud: Staying Secure Amid Emerging Threats - The Python Package Index Blog
Shai-Hulud is a great worm, not yet a snake. Attack on npm ecosystem may have implications for PyPI.
https://blog.flatt.tech/entry/mini_shai_hulud
Mini Shai-Hulud の概要と対応指針(2026年4月末 連続パッケージ侵害) - GMO Flatt Security Blog
May 12, 2026 - 2026年4月29日から30日にかけて、複数の主要パッケージが連続して侵害されました。npm 上では SAP CAP の @cap-js/sqlite / @cap-js/postgres / @cap-js/db-service および SAP の mbt、加えて intercom-client が、PyPI...
shai huludminigmoflattsecurity
https://endlessquestrecords.blogspot.com/2023/12/shai-hulud.html
The Endless Quest...: Shai Hulud
The next step in my mission to 'complete' my Revekation collection is some records by Florida metallic hardcore band, Shai Hulud. Back when ...
the endlessquestshai
https://thehackernews.com/2025/11/shai-hulud-v2-campaign-spreads-from-npm.html?m=1
Shai-Hulud v2 Spreads From npm to Maven, as Campaign Exposes Thousands of Secrets
Shai-Hulud v2 breached npm and Maven, impacting 28,000+ repos and leaking 11,858 secrets.
https://dev.to/cverports/ghsa-f8h5-x737-x4xr-finch-rust-the-shai-hulud-worm-burrows-into-cratesio-3a3i
GHSA-F8H5-X737-X4XR: Finch-Rust: The Shai-Hulud Worm Burrows into Crates.io - DEV Community
Finch-Rust: The Shai-Hulud Worm Burrows into Crates.io Vulnerability ID:... Tagged with security, cve, cybersecurity, ghsa.