Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
The Shai-Hulud 2.0 npm worm: analysis, and what you need to know (datadoghq.com)
4 points by saikatsg 15 days ago | hide | past | favorite | 2 comments


pretty crazy to see these sorts of worms, I think it's probably a good thing that we start to examine the "supply chain" of open source software and figure out ways to prevent this sort of attack.

Timing was definitely smart on the part of the attacker, heading into Thanksgiving in the US means a lot of people in vacation mode, probably not even realizing this is happening right now.

This should really be front page here


It was front page and highly discussed (1002 points, 2 days ago, 762 comments) https://news.ycombinator.com/item?id=46032539




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: