Known Shai-Hulud payload returns through four npm packages
Tue Sep 08 2026
Malware
Open Source
www.cisocommunity.nl
On September 7, a known Shai-Hulud software supply-chain payload resurfaced in four npm package releases published within an hour, showing the limits of automated, pre-installation malware scanning.