300 Npm Packages Compromised The Shai Hulud Worm Is Back

300+ npm Packages COMPROMISED: The Shai-Hulud Worm Is Back!

A massive new

The NPM Worm Is Back And It's So Much Worse (TanStack Hacked)

Shai Hulud

The NPM worm that spreads itself — Shai-Hulud explained

UPDATE: There has been a brand-new version of this attack that affected over 25000 GitHub repos -

The largest supply-chain attack ever…

Get 20% off Mobbin Pro to make your apps not ugly - https://mobbin.com/fireship Yesterday,

Hundreds of Repos Compromised by NPM Worm Shai-Hulud

Unpacking the Largest

Shai-Hulud is Back: TanStack & Mistral AI Breach by TeamPCP Mini Worm

In this episode of Bad Dependencies, we dive into the "wormy" chaos of the latest supply chain attack hitting the...

the npm malware is a hacking masterpiece

The

Mini Shai-Hulud: The npm Worm That Signs Its Own Malware (May 2026)

A self-spreading

massive self replicating malware worm in npm

Subscribe to my free weekly cybersecurity newsletter: https://vulnu.com/subscribe And another one. We've got hundreds...

Massive npm Supply Chain Attack - Is Your Project Safe? Shai-Hulud

Massive

NPM Attack Explained: 526 libraries compromised Shai-Hulud Worm: Biggest NPM Attack in Cybersecurity

The

Shai Hulud V2: Sha1Hulud the second coming - the New NPM supply chain Attack Hitting 700+ Packages

The

They Hit TanStack. 518 Million Downloads. And the Security Cert Was Real.

TeamPCP is

NPM package again got hacked

TanStack

NPM Supply Chain Attack 2026: TanStack Hit by Self-Spreading Worm

On May 11, 2026, between 19:20 and 19:26 UTC, a self-replicating

Why does this keep happening?

Scott and Wes break down the “Mini

Shai Hulud The Second Coming — Tecchnical Breakdown of the NPM & GitHub Worm

The

What the npm package attacks mean for us developers

There have been multiple

Stop updating your npm packages (seriously)

200+

The Npm Worm Outbreak

The world's biggest open-source ecosystem -