New Shai-Hulud malware wave compromises 600 NPM packages

itnerd.blog

4 pointsmooreds2 comments

Affected packages & versions here:

https://airtable.com/appQsN6RIDefm93kd/shrMwE9m9GqU7pjU5/tbl...

Edit: this is not a follow-on attack from the one last week, OP's linked article was published on May 19.

Haha, tells you something about the NPM ecosystem that rather than sharing the year something was published (typical for HN) I should reference the exact date.

Reply on news.ycombinator.com