Robuta

https://securitylabs.datadoghq.com/articles/shai-hulud-2.0-npm-worm/ The Shai-Hulud 2.0 npm worm: analysis, and what you need to know | Datadog Security Labs Learn more about the Shai-Hulud 2.0 npm worm. https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains Shai Hulud 2.0 Strikes Again: Malware Supply-Chain Attack Hits Zapier & ENS Domains Mar 17, 2026 - The threat actor behind “Shai Hulud 2.0” launched a new malware campaign compromising the supply chain of Zapier, ENS Domains and more — exposing secrets,... https://securitybridge.com/blog/a-mini-shai-hulud-has-appeared-when-the-npm-supply-chain-reaches-into-sap/ Mini Shai-Hulud: npm Supply Chain reaches into SAP security! Apr 30, 2026 - On April 29, 2026, four official npm packages in the SAP ecosystem were compromised, briefly spreading credential-stealing malware to developer environments. shai huludsupply chainmininpmreaches https://thehackernews.com/2025/11/second-sha1-hulud-wave-affects-25000.html Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft Security vendors warn Sha1-Hulud has hijacked 25,000+ GitHub repos via npm packages, stealing cloud credentials or wiping dev home directories. https://www.pcgamer.com/games/mmo/shai-hulud-defanged-in-dune-awakening-your-vehicles-are-no-longer-permanently-lost-if-a-sandworm-eats-them/ Shai Hulud defanged: In Dune: Awakening, your vehicles are no longer permanently lost if a sandworm... Oct 7, 2025 - A new patch lets you recover your swallowed rides, though there's a catch. And a cost. https://www.instructables.com/Dune-Shai-Hulud-Sandworm-Koinobori/ Dune Shai Hulud Sandworm Koinobori : 5 Steps (with Pictures) - Instructables Dune Shai Hulud Sandworm Koinobori: Like a fish out of water, make your own custom koinobori. Koinobori are windsocks or streamers that are attached to lines... shai huludwith picturesdunesandwormkoinobori https://helixguard.ai/blog/malicious-sha1hulud-2025-11-24/ Shai-Hulud Returns: Over 1K NPM Packages and 27K+ Github Repos infected via Fake Bun Runtime Within... Over 1,000 NPM packages were infected using the same method as the previous attack, infecting with a fake Bun runtime. The attacker leveraged the `preinstall`... https://blog.pypi.org/posts/2025-11-26-pypi-and-shai-hulud/ PyPI and Shai-Hulud: Staying Secure Amid Emerging Threats - The Python Package Index Blog Shai-Hulud is a great worm, not yet a snake. Attack on npm ecosystem may have implications for PyPI. https://blog.flatt.tech/entry/mini_shai_hulud Mini Shai-Hulud の概要と対応指針(2026年4月末 連続パッケージ侵害) - GMO Flatt Security Blog May 12, 2026 - 2026年4月29日から30日にかけて、複数の主要パッケージが連続して侵害されました。npm 上では SAP CAP の @cap-js/sqlite / @cap-js/postgres / @cap-js/db-service および SAP の mbt、加えて intercom-client が、PyPI... shai huludminigmoflattsecurity https://endlessquestrecords.blogspot.com/2023/12/shai-hulud.html The Endless Quest...: Shai Hulud The next step in my mission to 'complete' my Revekation collection is some records by Florida metallic hardcore band, Shai Hulud. Back when ... the endlessquestshai https://thehackernews.com/2025/11/shai-hulud-v2-campaign-spreads-from-npm.html?m=1 Shai-Hulud v2 Spreads From npm to Maven, as Campaign Exposes Thousands of Secrets Shai-Hulud v2 breached npm and Maven, impacting 28,000+ repos and leaking 11,858 secrets. https://dev.to/cverports/ghsa-f8h5-x737-x4xr-finch-rust-the-shai-hulud-worm-burrows-into-cratesio-3a3i GHSA-F8H5-X737-X4XR: Finch-Rust: The Shai-Hulud Worm Burrows into Crates.io - DEV Community Finch-Rust: The Shai-Hulud Worm Burrows into Crates.io Vulnerability ID:... Tagged with security, cve, cybersecurity, ghsa.