Shai-Hulud 2.0: Guidance for detecting, investigating, and defending against the supply chain attack

The Shai‑Hulud 2.0 supply chain attack represents one of the most significant cloud-native ecosystem

compromises observed recently. Attackers maliciously modified hundreds of publicly available packages,

targeting developer environments, continuous integration and continuous delivery (CI/CD) pipelines, and cloud-connected workloads to harvest credentials and configuration secrets. The Shai‑Hulud 2.0 campaign builds on earlier supply chain compromises but introduces more automation, faster

propagation, and a broader target set:

Malicious code executes during the preinstall phase of…