TGViewer
Programming Programming @programmingreddit · 910 subscribers
Post #12841 91
Sha1-Hulud The Second Comming - Postman, Zapier, PostHog all compromised via NPM
https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains

https://redd.it/1p5i31d
@programmingreddit
www.aikido.dev Shai Hulud 2.0 Strikes Again: Malware Supply-Chain Attack Hits Zapier & ENS Domains The threat actor behind “Shai Hulud 2.0” launched a new malware campaign compromising the supply chain of Zapier, ENS Domains and more — exposing secrets, injecting malicious code, and enabling widespread developer-environment takeover.
Open in Telegram All posts from @programmingreddit
More from @programmingreddit
  1. Oct 3, 2026Fighting for #1 in the Ultimate Tic-Tac-Toe Arena https://tomalard.github.io/posts/fightin…
  2. Oct 3, 2026New Python releases are out, 3.10.x reaches EOL, (and 3.15.0 is scheduled for today)! http…
  3. Oct 3, 2026C3 0.8.4: Parameter Reflection, Stack Protection, iOS Support—and One Last Renaming https:…
  4. Oct 3, 2026Zero-Growth Stack, Real Gains: How Stack Allocation Can Save 10% CPU in Go https://www.ube…
  5. Oct 3, 2026<input type="password" maxlength="20"> is considered harmful, and why I couldn't login int…
  6. Oct 1, 2026OpenZL v0.2 - decompression 2x faster than Zstandard https://openzl.org/blog/2026-09-29-lz…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →