Blogs
Attackers Testing New Strain of Shai-Hulud on npm: Aikido
Threat actors behind the virulent Shai-Hulud worm that wreaked havoc in open npm repositories toward the end of 2025 apparently are trying out a new strain that comes with slight m…
Tag
5 articles

CI/CD
The threat group behind the notorious Mini Shai-Hulud worm last month put the complete source code for the malware into a GitHub repository, essentially open sourcing the threat so that other bad actors can create their own varian…
Showing 1–5 of 5
Blogs
Threat actors behind the virulent Shai-Hulud worm that wreaked havoc in open npm repositories toward the end of 2025 apparently are trying out a new strain that comes with slight m…
Best of 2025
The attacker introduced malicious Python code that would expose secrets like authentication credentials in public repositories.
DevSecOps
The attacker introduced malicious Python code that would expose secrets like authentication credentials in public repositories.
Blogs
A global survey of 1,000 IT leaders from organizations with more than 500 employees published today finds that 79% have experienced or are aware of secrets leaking within their org…