Shai-Hulud 2.0 compromises about 700 npm packages

The sandworm of npm supply chain attacks returns: Wiz documented the Shai-Hulud 2.0 campaign which compromised approximately 700 npm packages from major developers like Zapier, PostHog, and Postman, affecting over 25,000 GitHub repositories. The malware steals AWS keys, GitHub tokens, and cloud secrets during installation, then creates persistence through GitHub workflows that register infected machines as self-hosted runners. HelixGuard’s analysis details how a counterfeit Bun runtime was distributed through npm, compromising 1,000+ packages within hours. PostHog’s post-mortem traces its part to a pull_request_target workflow that ran code from a malicious pull request, which handed the attacker a bot token and, two steps later, the npm publishing token. HN discussion contains the expected “this is why I pin everything” comments.