Shai-Hulud: Whoever controls your package registry controls your pipeline
On September 15, 2025, npm’s registry did something unprecedented: Packages began updating themselves. No maintainer ran npm publish. No pull The post Shai-Hulud: Whoever controls your...
Read more








