A large-scale npm supply chain attack has compromised dozens of official packages under the @redhat-cloud-services scope, … Massive npm Supply Chain Attack Targets Red Hat PackagesRead more
mini Shai-Hulud
Worm Alert: SAP npm Packages Weaponized to Steal Cloud and AI Secrets
A sophisticated supply chain attack has targeted the SAP developer ecosystem, hijacking official npm packages to … Worm Alert: SAP npm Packages Weaponized to Steal Cloud and AI SecretsRead more
5 Ways the “Mini Shai-Hulud” Worm Steals Your CI/CD Secrets
On April 29, 2026, security researchers at StepSecurity, Wiz, and Socket identified a highly sophisticated supply … 5 Ways the “Mini Shai-Hulud” Worm Steals Your CI/CD SecretsRead more