SecurityHorrors

Stories you never want to feel on your own skin

11 May 2026

Mini Shai-Hulud: The Package That Crawled Through CI

TLDR and affected package summary for the Mini Shai-Hulud npm and PyPI supply-chain campaign.