Shai-Hulud changed npm supply chain attacks. Adversaries now use wormable propagation, infrastruc...

Summary

A coordinated campaign dubbed Shai-Hulud has introduced new attack sophistication to npm supply chain compromises, leveraging wormable propagation mechanisms, infrastructure persistence, and multi-stage payloads. The campaign weaponizes popular developer tools including Docker, GitHub, VS Code, and npm itself. This represents an evolution in supply chain attack tactics, moving beyond simple package injection to self-propagating, persistent threats.

Entities