New Shai-Hulud malware wave compromises 600 npm packages
Tue May 19 2026
Malware
Open Source
www.bleepingcomputer.com
Threat actors earlier today published more than 600 malicious packages to the Node Package Manager (npm) index as part of a new Shai-Hulud supply-chain campaign. [...]