Multiple security vendors are sounding the alarm about a second wave of attacks targeting the npm registry in a manner that’s reminiscent of the Shai-Hulud attack.
The new supply chain campaign, dubbed Sha1-Hulud, has compromised hundreds of npm packages, according to reports from Aikido, HelixGuard, Koi Security, Socket, and Wiz.
“The campaign introduces a new variant that executes malicious
BEAST mode: UAH researcher wins $500K DARPA award for project to identify and understand malware – 256 Today
BEAST mode: UAH researcher wins $500K DARPA award for project to identify and understand malware 256 Today
