News for hackers. Stuff that matters.
Re:The Shai-Hulud 2.0 npm worm: analysis, and what you need ... by lucastech on Wednesday November 26, 2025 @12:06PM (#46059668)
pretty crazy to see these sorts of worms, I think it's probably a good thing that we start to examine the "supply chain" of open source software and figure out ways to prevent this sort of attack.

Timing was definitely smart on the part of the attacker, heading into Thanksgiving in the US means a lot of people in vacation mode, probably not even realizing this is happening right now.

This should really be front page here

Re:The Shai-Hulud 2.0 npm worm: analysis, and what you need ... by gnabgib on Wednesday November 26, 2025 @12:10PM (#46059719)
It was front page and highly discussed (1002 points, 2 days ago, 762 comments) https://news.ycombinator.com/item?id=46032539