Select Page
    GitHub Worm Hits npm Packages With 16M Downloads

    GitHub Worm Hits npm Packages With 16M Downloads

    Key TakeawaysMini Shai-Hulud exploited GitHub Actions on May 19, compromising 300+ npm packages across 16M weekly downloads.The malware installs a dead-man’s switch that wipes the developer’s machine if the stolen npm token is revoked.GitHub responded May 20 with...
    Translate »