🕵️ Shai-Hulud 2.0

The items that name it 13

• Package Manager Sandboxing (Andrew Nesbitt)
  articleas threat actors2026-09-24
• Happy Birthday, Shai-Hulud
  articleas classification.key entities2026-09-18
• Shai-Hulud 2 Malware Campaign Targets GitHub and Cloud Credentials Using Bun Runtime | Blog | Endor Labs
  writeupas classification.key entities2026-09-11
• SolarWinds took a nation-state. The next attack just needs an LLM and $5. | Blog | Endor Labs
  articleas threat actors2026-09-11

  November 2025 return of the Shai-Hulud worm with refined tactics, compromising packages by major publishers including Postman, Posthog, Zapier, and others.

• Introducing deny list egress policies for Harden-Runner
  articleas classification.key entities2026-09-02
• Shai-Hulud was the best thing to happen to supply chain security
  articleas threat actors2026-08-24

  Campaign on Nov 23, 2025; used a Pwn Request against the asyncapi/cli repository to exfiltrate a CI token in under three minutes, then deployed the worm via a malicious OpenVSX extension, spreading to 25,000+ malicious repositories. Microsoft published guidance Dec 9. Attacker renamed GitHub account

• The State of Open Source Supply Chain Attacks
  articleas classification.key entities2026-08-23
• Why NPM Malware Keeps Reaching for Bun | Supply Chain Security | Blog | Endor Labs
  articleas classification.key entities2026-08-12
• The OpenSourceMalware Show #13
  talkas threat actors2026-07-16It is written here as Shai Hulud 2.0.

  Referenced as a 2025 incident that affected the same AsyncAPI team ('they got done in Shai Hulud 2.0 in 2025'), no confirmed relation to the new AsyncAPI compromise

• M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions
  writeupas threat actors2026-07-14

  Previous compromise of @asyncapi namespace; this new attack does not appear directly connected to it.

• How Aikido Intel detects malware and vulnerabilities first
  articleas classification.key entities2026-07-13
• The Wild West of VS Code extensions and how a poisoned extension breached GitHub
  articleas threat actors2026-05-20

  Worm wave whose first-blood event was the AsyncAPI compromise in November 2025; used stolen npm and OpenVSX publishing tokens to push malicious AsyncAPI npm packages and a malicious version of the AsyncAPI VS Code extension on OpenVSX.

• Shai-Hulud-2.0-Detector — npm supply-chain compromise scanner
  repoas threat actors

  Supply chain attack that compromised the npm ecosystem on November 24, 2025; installs setup_bun.js/bun_environment.js payloads via preinstall/postinstall hooks, steals credentials with TruffleHog, exfiltrates to attacker-controlled GitHub repos, self-propagates to up to 100 additional npm packages,