TGViewer
JavaScript JavaScript @javascript · 31.1K subscribers
Post #2649 3.76K
👀 The 'Shai-Hulud' npm Supply Chain Attack Rumbles On

Now named after a term for the sandworms of the Dune universe, the ongoing malicious supply chain attack affecting the npm ecosystem has grown in scale with hundreds of packages affected in an attempt to exfiltrate tokens and secrets from developers’ machines.

Pandya, van der Zee, and Brown (Socket)
  • ❤ 7
  • 👍 2
  • 🔥 1
More from @javascript
  1. Oct 1, 2026Post #3530
  2. Oct 1, 2026CHALLENGE class Counter { #count = 0; static #instances = 0; constructor() { Counter.#inst…
  3. Sep 30, 2026Post #3528
  4. Sep 30, 2026CHALLENGE const message = 'a😀bc'; const codePoints = [...message]; const combined = { raw…
  5. Sep 29, 2026Post #3526
  6. Sep 29, 2026CHALLENGE const order = []; order.push('start'); setTimeout(() => { order.push('timeout');…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →