CISA has issued an urgent security Alert in response to a large-scale software supply chain attack on npmjs.com, the world’s largest JavaScript package registry. A self-replicating worm, dubbed Shai-Hulud, has infiltrated more than 500 npm packages and injected malicious code that aggressively spreads by abusing developer credentials and npm publish workflows. Self-Replicating npm Supply Chain […]
The post CISA Warns of Shai-Hulud Self-Replicating Worm Compromised 500+ Packages in npm Registry appeared first on Cyber Security News.
Read the original article: