Is Shai-Hulud back? Researchers spot 'wormy boy' slipping past npm malware scanning features

The Shai-Hulud npm worm is back several months after everyone assumed it was dead.Back in May, a compromised maintainer account pushed 639 malicious versions of @antv packages to npm in a single hour, although the attack was swiftly halted.However, while npm has since introduced publish-time malware scanning, researchers at Aikido Security spotted... Weiterlesen