Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages

News Companies Events

Statistics About NLC Contact us

News Companies Events

Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages

Image for the article: Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages

Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages

Tue Aug 04 2026

Malware

Open Source

hackread.com

Shai-Hulud npm worm spreads through Keyv and hundreds of packages with 2 billion monthly downloads, stealing npm, GitHub, cloud and CI credentials in real time.