All posts
Topic
Shai Hulud
2 articles on shai hulud.
Shai-Hulud Took keyv — and the Malware Shipped With Valid Provenance
A maintainer account compromise poisoned keyv, flat-cache, file-entry-cache and the rest of the family, then spread to 868 more packages across 1,381 versions — over 2 billion monthly installs. The releases were signed by GitHub Actions and the provenance checks out. That is the part worth your attention.
August 4, 2026
The Suno Breach: An npm Worm, a Scraped Training Set, and a Notification That Never Came
A hacker used the self-propagating Shai-Hulud npm worm to breach AI music company Suno, leaking source code that details how its training corpus was scraped — plus customer emails, phone numbers, and Stripe data. Here is what actually happened and what security leaders should take from it.
July 16, 2026