Research reports
1,224 reports from 387 publishers45 added in the past week
1 report, newest added first
Added Wed 29 Apr
Shai-Hulud 2.0: Aggressive, Automated, and Fast Spreading
In mid-September 2025, security researchers first identified a supply-chain compromise in the npm ecosystem, the original Shai-Hulud campaign. The first known compromised package was @ctrl/tinycolor version 4.1.1. Only two months later, a far more aggressive…
Supply chain
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.