Shai-Hulud: What to Know About the Malware Spreading Through Software Pipelines

In brief

• Shai-Hulud malware has been linked to roughly 300 npm and PyPI package entries.
• OpenAI, Microsoft, and Mistral AI disclosed recent Shai-Hulud-related incidents.
• The malware abused GitHub Actions and trusted software publishing workflows.