Dossier
Shai-Hulud worm
Coverage of Shai-Hulud worm in the Nexus archive.
- The Hackers Behind Shai-Hulud: Lucky or Skilled?
TeamPCP, the hackers behind the Shai-Hulud worm, has caused significant damage to the open source ecosystem. The article questions whether their success stems from skill or luck, suggesting their impact may not be solely due to technical expertise.
- TanStack weighs invitation-only pull requests after supply chain attack
The TanStack team is considering making pull requests invitation-only after a supply chain attack used malicious code from the Shai-Hulud worm. The attack poisoned a cache used across the entire repository and led to security measures being proposed. The team is weighing the benefits of increased security against potential deterrents to contributions.