Massive "Shai-Hulud" npm Supply-Chain Attack Compromises Over 1,280 Packages and 2 Billion Monthly Installs
Executive Overview The global software development ecosystem is grappling with one of the most aggressive and fast-moving supply-chain attacks in recent memory. Cybersecurity researchers from Aikido Security and Endor Labs have sounded the alarm over a rapidly spreading malware campaign linked to the notorious "Shai-Hulud" threat group. This sophisticated worm has successfully compromised well over…