npm Shai-Hulud 2.0: 25,000+ Repos Compromised in 2 Days
Shai-Hulud 2.0 worm exploited npm preinstall scripts Nov 21-23, compromising 796 packages, 25,000+ repos, exposing 11,858 secrets. Major victims: PostHog, Postman, Zapier.
Programming languages, frameworks, and web development