Skip to content
Over 400 NPM Packages Potentially Compromised by Shai Hulud Malware, Affecting Ethereum ENS Tools

Over 400 NPM Packages Potentially Compromised by Shai Hulud Malware, Affecting Ethereum ENS Tools

BearishETH logoETHENS logoENS
CoinOtag logoCoinOtagNovember 24, 20251 min read
Share:

The Shai Hulud malware has compromised over 400 NPM libraries, including at least 10 crypto-related packages mostly linked to Ethereum Name Service (ENS), in a major JavaScript supply-chain attack. This self-replicating threat steals credentials, potentially exposing wallet keys in developer environments, as identified by Aikido Security researcher Charlie Eriksen. Over 400 NPM packages infected: Includes [...]

is self-replicating threat steals credentials, potentially exposing wallet keys in developer environments, as identified by Aikido Security researcher Charlie Eriksen. Over 400 NPM packages infected: Includes [...]