Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps

Attackers poisoned hundreds of npm and PyPI package releases, using compromised CI and cached builds to ship malicious versions.

The Shai-Hulud worm stole secrets, set up persistence, and spread from Node.js into Python ecosystems.

The campaign hit widely used packages and showed that signed provenance and 2FA can still fail when CI and publish controls are mis-scoped.

Developer credentials and downstream systems were put at risk across tools and services including GitHub, AWS, Vault, and Docker.