https://www.veracode.com/blog/npm-account-compromise-the-shai-hulud-worm/
NPM Account Compromise: Tracking the "Shai-Hulud" Worm
Sep 19, 2025 - Discover how a recent npm account compromise led to the injection of advanced malware with worm-like capabilities, threatening the security of the software...
account compromisethe shainpmtrackingworm
https://www.upguard.com/breaches/identifying-companies-affected-by-the-shai-hulud-npm-supply-chain-attack
Identifying Companies Affected by the Shai-Hulud NPM Supply Chain Attack | UpGuard
Using Github event archives, UpGuard Research identifies companies with indicators of compromise of the Shai-Hulud attacks, even after the repos have been...
supply chain attackby theshai hulud