Attackers Testing New Strain of Shai-Hulud on npm: Aikido

Source: DevOps.com

New Strain of Shai‑Hulud Observed in npm Packages

Threat actors behind the virulent Shai-Hulud worm that wreaked havoc in open npm repositories toward the end of 2025 apparently are trying out a new strain that comes with slight modifications. Security researchers with Aikido Security, who have been tracking Shai-Hulud for months, wrote in a report…