Hackers Compromise Over 170 npm Packages In Shai-Hulud Supply Chain Attack
VPN Central [Unofficial]
May 14, 2026
Hackers have compromised more than 170 npm packages and two PyPI packages in a new Shai-Hulud supply chain attack aimed at stealing developer credentials, cloud keys, and CI/CD secrets. JFrog Security Research says the affected packages receive more than 200 million downloads per week, which makes the incident a major risk for development teams, build […]
The post Hackers Compromise Over 170 npm Packages In Shai-Hulud Supply Chain Attack appeared first on VPN Central.
Discussion in the ATmosphere