Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesEarnSquareMore
Shai-Hulud Malware Compromises Over 600 npm Packages

Shai-Hulud Malware Compromises Over 600 npm Packages

Coinlineup2025/11/25 02:21
By:Coinlineup
Key Takeaways:
  • Main event, leadership changes, market impact, financial shifts, or expert insights.
  • Attacks target developer credentials and cloud storage.
  • No direct protocol-level theft confirmed yet.

Over 600 npm packages experienced compromise by “Shai-Hulud,” a malware attack targeting developer credentials and wallet keys. Key projects, such as Zapier, ENS Domains, and Postman, were impacted, risking data theft and unauthorized financial access.

A malware attack known as Shai-Hulud has compromised over 600 npm packages, targeting developer credentials and wallet keys since November 21, 2025.

The Attack’s Impact

The malware attack, called Shai-Hulud, has breached more than 600 npm packages, affecting high-profile projects such as Zapier and AsyncAPI. Early detection by Aikido Security’s Charlie Eriksen revealed the exposure of credentials and secrets to GitHub.

“Discovered the new Shai-Hulud campaign earlier today, 105 trojanized packages with indicators, now 492. Secrets are leaking to GitHub.” – Charlie Eriksen, Malware Researcher, Aikido Security ( Aikido Security )

Important players such as ENS Domains and Postman were also impacted, with Wiz Research Team documenting a propagation timeline. Attacks originated from compromised npm maintainer accounts, leveraging phishing but with unidentified authors.

Cloud services like AWS and crypto assets including ETH and BTC face risks of theft due to compromised credentials. Despite no confirmed protocol-level hacks , the attack impacts developer environments and cloud infrastructure significantly.

Financial and crypto markets face indirect threats with exposed secrets potentially leading to wallet drains. Severe impacts on developer infrastructure highlight the need for enhanced security measures.

Observations from previous attacks indicate self-replicating malware tactics, similar to historical npm phishing campaigns. Indirect exposure of private repositories could elevate risks of operational and financial disruption.

The Shai-Hulud malware creates significant challenges requiring immediate password rotations and security updates. Monitoring and evaluative controls are essential to prevent further damage in future supply chain occurrences.

0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Earn new token airdrops
Lock your assets and earn 10%+ APR
Lock now!

You may also like

TrustLinq Converts Cryptocurrency into Spendable Cash for Daily Life

- TrustLinq, a Swiss-regulated firm, launched a crypto-to-fiat platform enabling global payments in 70+ currencies without traditional banking infrastructure. - The platform addresses crypto adoption gaps by converting digital assets to fiat for rent, payroll, and international transfers, bypassing recipient crypto requirements. - Operating under Swiss AML regulations with non-custodial security, it targets individuals and businesses seeking crypto integration for practical financial operations. - Debit ca

Bitget-RWA2025/11/25 09:40
TrustLinq Converts Cryptocurrency into Spendable Cash for Daily Life

Solana News Update: Pump.fun Transfers $436M—Strategic Treasury Move or Exit Strategy?

- Pump.fun denied allegations of cashing out $436.5M USDC , calling transfers routine treasury management amid a $19B crypto market crash. - Critics question timing as revenue dropped 53% to $27. 3M , with funds traced to June's institutional PUMP token sale at $0.004 each. - The team defended moves as reinvestment for ecosystem expansion, citing acquisitions and 12% PUMP buybacks since October. - Social media silence and a 72% PUMP price drop fueled exit speculation, despite $855M stablecoin liquidity rep

Bitget-RWA2025/11/25 09:40