Zero-day Extensive NPM Package Compromise - Shai Hulud Supply Chain Attack

2025-09-15来源 Snyk BlogEnglish
Zero-day Extensive NPM Package Compromise - Shai Hulud Supply Chain Attack
A supply chain attack hit the ngx-bootstrap npm package, embedding malware to steal developer credentials. See affected versions (e.g., 20.0.4-6, 19.0.3) and our playbook to contain the threat and rotate compromised secrets.

原文：https://www.a8q9.cn/en/article/zero-day-extensive-npm-package-compromise-shai-hulud-supply-chain-attack-76f06e.html

相关文章