Shai-Hulud 2.0 Supply Chain Compromise

T1Covered by 1 source · first reported by Vercel (blog + changelog) at 24 Nov 2025, 13:00 UTC

were compromised Multiple npm packages from various web servicesthrough account takeover/developer compromise. A malicious actor was able to add a stealthy loader to the package.json file that locates the Bun runtime, silently installs, then executes a malicious script. Our investigation has shown…