techPublished
Malware infects thousands of npm packages, steals developer secrets
techA variant of the Shai-Hulud malware has infected over 1,300 npm packages, compromising the security of millions of developers and organizations. The malware steals sensitive information, including developer and cloud credentials. Experts warn that systems affected by the malware should be treated as compromised, even after removal.
At a glance
- Over 1,300 npm packages infected with Shai-Hulud malware
- Malware steals developer and cloud credentials, and other sensitive information
- Experts warn of potential security risks even after removal of affected packages