Skip to content

Big attack on NPM – Shai-Hulud 2.0

about.gitlab.com
2 pointsthomasfl3 comments
On HN

Comments

Made a package (that I needed personally), to easily reinstall all dependencies (using the same versions) in a project and check them using Aikido's safe chain for malware (supported npm, pnpm, bun, and yarn). It also easily switches a project's package manager to another. https://www.npmjs.com/package/eazypm

This is a nasty npm attack. It steals API keys and credits.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.