CyberSecurityBoardThreat Intel · CVEs · Products
Malware

Shai-Hulud: Historical npm Worm Activity

July 7, 2026

Shai-Hulud is a known npm worm family that has been active in past supply chain attacks. The recent ChainDrop campaign shows tradecraft resembling earlier Shai-Hulud activity, though the current attacks remain unattributed.