
Risky Business #807 -- Shai-Hulud npm worm wreaks old-school havoc
Risky Business
00:00
Intro
This chapter discusses the Shai-Hulud npm worm, a new threat infecting the npm package repository by stealing developer credentials and uploading them to public GitHub. The speakers evaluate the implications of this attack and the vulnerabilities it reveals within the npm ecosystem, along with security responses from organizations like CrowdStrike.
Transcript
Play full episode