Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
Shai-Hulud npm Worm Resurfaces After 111 Days and Slips Past Malware Scanning

A familiar npm worm has returned after more than three months of silence, carrying the same malicious file linked to an earlier supply-chain incident. The reappearance shows how a known threat can regain access to developer environments when it is republished inside ordinary software packages. The latest activity involved four packages uploaded within one hour […] The post Shai-Hulud npm Worm Resurfaces After 111 Days and Slips Past Malware Scanning appeared first on Cyber Security News.
A familiar npm worm has returned after more than three months of silence, carrying the same malicious file linked to an earlier supply-chain incident. The reappearance shows how a known threat can regain access to developer environments when it is republished inside ordinary software packages. The latest activity involved four packages uploaded within one hour on September 7. When a developer installs a poisoned dependency, the malware can run before normal work begins, look…
Excerpt shown under the publisher's RSS terms · 74 words · full text and figures are on the publisher's site
Related coverage

Popular npm Package With 150K+ Weekly Downloads Hit by Credential-Stealing Supply-Chain Worm
Cybersecurity News · Aug 31, 2026

Developer laptops are the credential store attackers are picking through in 2026, GitGuardian announces Endpoint Protection
Cybersecurity News · Jun 16, 2026

Red Hat hit by npm supply‑chain attack - here's how to stay safe
ZDNet · Jun 3, 2026

Tensorlake npm Package Compromised to Spread Shai-Hulud Worm and Steal Developer Secrets
Cybersecurity News · Oct 8, 2026