Multiple security vendors are sounding the alarm about a second wave of attacks targeting the npm registry in a manner that’s reminiscent of the Shai-Hulud attack. The new supply chain campaign, dubbed Sha1-Hulud, has compromised hundreds of npm packages, according…
The post Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft appeared first on IT Security News.