640 NPM Packages Infected in New ‘Shai-Hulud’ Supply Chain Attack

The new self-replicating worm iteration has destructive capabilities, erasing home directory contents if it cannot spread to more repositories.

The post 640 NPM Packages Infected in New ‘Shai-Hulud’ Supply Chain Attack appeared first on SecurityWeek.

Read more: 640 NPM Packages Infected in New ‘Shai-Hulud’ Supply Chain Attack

Story added 25. November 2025, content source with full text you can find at link above.