Security Feed
  1. Archives

Dec 02 2025 Shai-Hulud 2.0 NPM malware attack exposed up to 400,000 dev secrets

Source

The second Shai-Hulud attack last week exposed around 400,000 raw secrets after infecting hundreds of packages in the NPM (Node Package Manager) registry and publishing stolen data in 30,000 GitHub repositories. [...]

Posted by Bill Toulas on Tue 02 December 2025 in BleepingComputer.

Tags: Security.

Categories

  1. Ars Technica
  2. AWS Security
  3. BleepingComputer
  4. Brian Krebs
  5. Bruce Schneier
  6. GCP Security
  7. Google Project Zero
  8. The Daily Swig
  9. The Guardian
  10. The Register
  11. Threatpost

Tag cloud

  • Security
  • Uncategorized
  • Security, Identity, & Compliance
  • Biz & IT
  • Security Blog
  • Microsoft
  • Security & Identity
  • Google
  • AI
  • CryptoCurrency
  • Announcements
  • Foundational (100)
  • A Little Sunshine
  • Legal
  • Artificial Intelligence
  • Mobile
  • privacy
  • Apple
  • squid
  • Intermediate (200)
  • Advanced (300)
  • hacking
  • Technical How-to
  • The Coming Storm
  • vulnerabilities

Security Feed. Powered by Pelican and m.css. Code is available on GitLab.