Hacker News 50 @hn50@social.lansky.name
Public

SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM

Link: aikido.dev/blog/shai-hulud-str
Discussion: news.ycombinator.com/item?id=4

Shai Hulud 2.0 Strikes Again: Malware Supply-Chain Attack Hits Zapier & ENS Domains

The threat actor behind “Shai Hulud 2.0” launched a new malware campaign compromising the supply chain of Zapier, ENS Domains and more — exposing secrets, injecting malicious code, and enabling widespread developer-environment takeover.

www.aikido.dev

0
0
0

If you have a fediverse account, you can quote this note from your own instance. Search https://social.lansky.name/users/hn50/statuses/115605661657538365 on your instance and quote it. (Note that quoting is not supported in Mastodon.)