this post was submitted on 18 Sep 2025
38 points (100.0% liked)

JavaScript

2521 readers
1 users here now

founded 2 years ago
MODERATORS
erlingur@programming.dev
Ategon@programming.dev
nick@programming.dev
38
Shai-Hulud: The novel self-replicating worm infecting hundreds of NPM packages | Sysdig (www.sysdig.com)
submitted 3 weeks ago by CodiUnicorn@programming.dev to c/javascript@programming.dev
4 comments fedilink hide all child comments
top 4 comments
sorted by: hot top controversial new old
[–] iii@mander.xyz 12 points 3 weeks ago (1 children)

Old school ideas with a new paintjob. I kinda like it.

[–] dotslashme 10 points 3 weeks ago

Honestly, I'm surprised it has taken them this long to develop a proper worm, considering how everything ties into everything else.

It's for sure the next logical step.

[–] Kissaki@programming.dev 2 points 3 weeks ago

https://github.com/Srylax/awesome-shai-hulud

A curated list of Shai-Hulud'd repositories

lol

Rick Rolls

yeah okaay, of course there's those as well

[–] Kissaki@programming.dev 1 points 3 weeks ago

CrowdStrike is a global cybersecurity leader with an advanced cloud-native platform for protecting endpoints, cloud workloads, identities and data.

At the time of this writing, approximately 200 infected packages have been identified, including several repositories such as the popular @ctrl/tinycolor and multiple owned by CrowdStrike.

Oops 🫠