EndorLabs

Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks

A new wave of Shai-Hulud supply chain attacks has impacted over 471 NPM and PyPI packages, utilizing variants named Miasma and Hades. The attacks, originating from TeamPCP, involve credential harvesting and self-replicat…