Live updates: Shai-hulud, the most dangerous NPM breach in history(koi.security)

46 pointsby chha10 maanden geleden3 comments

koi.security

Live updates: Shai-hulud, the most dangerous NPM breach in history

https://www.koi.security/blog/shai-hulud-npm-supply-chain-attack-crowdstrike-tinycolor

3 comments

btown10 maanden geleden

Larger discussion thread here: https://news.ycombinator.com/item?id=45260741

293984j2938410 maanden geleden

I scanned this discussion looking for a way to tell if you've been compromised but nothing jumped out.

bikeshaving10 maanden geleden

If you’re a package maintainer, please defensively revoke all NPM and GitHub tokens. This is a worm which is still spreading and you probably don’t want to publish anything today anyways, so you might as well use this incident as an opportunity to rotate everything.