HelixGuard Blog company blog
Shai-Hulud Returns: Over 300 NPM Packages Infected
Over 1,000 NPM packages were infected using the same method as the previous attack, infecting with a fake Bun runtime. The attacker leveraged the `preinstall` script to download and execute a malicious payload, stealing sensitive information from the compromised machines.
- Points
- 1,038
- HN comments
- 775
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacySoftware Engineering2025
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Nov 24, 2025 | Shai-Hulud Returns: Over 300 NPM Packages Infected by mrdosija | 1,038 | 775 |
