Detect and mitigate malicious npm packages linked to the recent Shai-Hulud-style campaign. Over 25,000 affected repositories across ~350 unique users.
Source link
Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secrets
Related Articles
All CloudSecurity →
Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild
Table of Contents Secret Validation Internal Discovery Code Execution and Lateral Movement Data Exfiltration Adversary Profile Network Indicators Code Indicators User Agents References Following the…
Wiz Service Catalog: Expand Risk Visibility & Ownership
Table of Contents A Shared View of Cloud Risk See Risk Across Your Service’s Entire Dependency Tree Service-Level Insights for Security Teams Frictionless Remediation for…
Build AI Threat Readiness with Wiz
Table of Contents Remove logic-driven vulnerabilities with Red Agent, the AI-pentester Pillar 3: Deep AI Code Analysis enriched on the Wiz Security Graph Context-aware AI-SAST…
Agentic Browser Security: 2025 Year-End Review
Table of Contents The Year of Agentic Browsers The Year in Attacks on Agentic Browser Manufacturer’s Guidance Where this leaves us An Agentic Browser is…
Secure AI Endpoints with Wiz & Cloudflare
Table of Contents Merging Deep Cloud Context with AI Endpoint Protection Closing the Gap Between AI Visibility and Protection Get Started with Wiz and Cloudflare …
Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malware
Table of Contents Notable Updates Attribution @cap-js/postgres 2.2.2 @cap-js/db-service 2.10.1 @cap-js/sqlite 2.2.2 mbt 1.2.48 Shared Dropper (all 4 packages) Update 1520 UTC, 30 April 2026:…