Shai-Hulud: A complete post-mortem

Lobsters·14 points·hoistbypetard·10 months ago·trigger.dev

On November 25th, one of our engineers was compromised by the Shai-Hulud npm supply chain worm. Here's what happened, how we responded, and what we've changed.

Read the full article at trigger.dev →

#hulud #shai #shai hulud #complete #mortem #security #25th #november

Related stories

The Risks of Ignoring API Security During Mobile App Security Testing
Hacker News · 1 points · 3 days ago
Forging 1024-bit RSA signatures in nearly SNFS timeeprint.iacr.org
Lobsters · 7 points · 7 days ago
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-dayarstechnica.com
Ars Technica · 0 points · 9 days ago
On Improvements of Low-Deterministic Security (2016)pp.ipd.kit.edu
Lobsters · 2 points · about 8 years ago
Show HN: Pawl – iOS gambling blocker you unlock with a physical Security Keygithub.com
Hacker News · 1 points · 4 days ago
Torvalds On Linux Security Modulesphoronix.com
Lobsters · 23 points · 10 months ago

Related topics

security260 complete25 november6 mortem4