Shai-Hulud malware infiltrates 490 NPM packages, stealing API keys and credentials from ENS and major crypto development ...

The attackers have learned from their mistakes and have now developed a more aggressive version of the worm. It has already ...

Approximately 640 NPM packages have been infected with a new variant of the Shai-Hulud self-replicating worm in a fresh wave of attacks.

A new iteration of the Shai-Hulud malware that ran through npm repositories in September is faster, more dangerous, and more destructive, creating huge numbers of malicious repositories, compromised ...

"As a new and significantly more aggressive wave of npm supply chain malware, Shai-Hulud 2 combines stealthy execution, ...

The Postman MCP Server connects Postman to AI tools, giving AI agents and assistants the ability to access workspaces, manage collections and environments, evaluate APIs, and automate workflows ...

Researchers uncover more than 80,000 leaked passwords, keys, and sensitive files exposed on popular online code formatting ...

The Shai-Hulud supply chain attack campaign, responsible for compromising hundreds of CrowdStrike’s NPM packages in September ...

Hundreds of trojanized versions of well-known packages such as Zapier, ENS Domains, PostHog, and Postman have been planted in ...

"SDKs are essential to driving API adoption, but creating and maintaining them is often cumbersome," said Abhinav Asthana, co-founder and CEO of Postman. "With its developer-first mindset, liblab made ...

While the September 2025 Shai-Hulud attack focused primarily on credential harvesting and self-propagation, this new variant ...

APIs are about to think for themselves, shifting integration from rigid rules to smart, adaptive systems that learn what your ...