Re:GitLab discovers widespread NPM supply chain attack
by ksynwa on Friday November 28, 2025 @06:32AM
(#46077720)
What are the "sha1-hulud" github repositories for exactly? I see files like secrets.json but the contents seems to not be valid json. Are these encrypted?
[ Parent
| on HN ]
Re:GitLab discovers widespread NPM supply chain attack
by hiccuphippo on Friday November 28, 2025 @11:23AM
(#46080016)
I looked at one and it was doubly encoded base64.