New Shai-Hulud malware wave compromises 600 npm packages
Medium Severity
Global
Date OccurredMay 19, 202614:30 UTC
Event TypeCyber Intelligence
SourceBleepingComputer
RecordedMay 19, 2026
Full Description
Threat actors earlier today published more than 600 malicious packages to the Node Package Manager (npm) index as part of a new Shai-Hulud supply-chain campaign. [...]