wiz.io/blog· Nov 24, 2025· by Hila Ramati

Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secrets

Open Original Article ↗
Detect and mitigate malicious npm packages linked to the recent Shai-Hulud-style campaign. Over 25,000 affected repositories across ~350 unique users.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.