Post · bonfire.cafe

@jbz@indieweb.social · 3 days ago

Shai-Hulud Returns: Over 300 NPM Packages and 27K+ Github Repos infected via Fake Bun Runtime Within Hours // HelixGuard

https://helixguard.ai/blog/malicious-sha1hulud-2025-11-24

#shaihulud #npm #supplychain #infosec #github

HelixGuard

Supply chain security, vulnerability intelligence, and malware detection.

@jbz@indieweb.social replied · 3 days ago

Shai Hulud Launches Second Supply-Chain Attack: Zapier, ENS, AsyncAPI, PostHog, Postman Compromised

https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains

Log in

bonfire.cafe

A space for Bonfire maintainers and contributors to communicate

bonfire.cafe: About · Code of conduct · Privacy · Users · Instances

Bonfire social · 1.0.1-alpha.5 no JS en

Automatic federation enabled