The novel malware strain is being dubbed Shai-Hulud — after the name for the giant sandworms in Frank Herbert’s Dune novel ...

Plus: An investigation reveals how US tech companies reportedly helped build China’s sweeping surveillance state, and two ...

"Each published package becomes a new distribution vector: as soon as someone installs it, the worm executes, replicates, and ...

If you’re looking for the Connections answer for Sunday, September 28, 2025, read on—I’ll share some clues, tips, and ...

Suspected Chinese hackers have used the Brickstorm malware in long-term persistence espionage operations against U.S.

The vendor was one of a many whose code modules were infected by a never before seen strand of malware known as "Shai-Hulud." ...

In a similar style to the Nx attack, the payload then publishes a new repo via the victim's GitHub account, dropping stolen ...

A new piece of malware is spreading through the popular tinycolor NPM library and more than 300 other packages, some of which ...

CERT-In, India's cybersecurity agency, warns startups and IT firms about a Dune-inspired malware, 'Shai-Hulud', targeting the npm ecosystem.

India’s cybersecurity agency warns of a fast-spreading npm supply chain worm, urging startups and ITes firms to secure ...

In 2010, a computer worm called Stuxnet sabotaged Iran’s nuclear program. It wasn’t ordinary malware—it was the world’s first true cyberweapon, capable of crippling nations.

A new supply chain attack on npm, the node package manager, has injected the first malware with self-replicating worm ...