← Back to Feed
Shai-hulud 2.0 Campaign Targets Cloud and Developer Ecosystems
November 27, 2025 · Trend Micro · Severity: MEDIUM
Shai-hulud 2.0 campaign features a sophisticated variant capable of stealing credentials and secrets from major cloud platforms and developer services, while automating the backdooring of NPM packages maintained by victims. Its advanced tactics enable rapid, stealthy propagation across the software supply chain, putting countless downstream users at risk.
Key Takeaways
- Shai-hulud 2.0 steals credentials and secrets from major cloud platforms and developer services.
- The campaign automates backdooring of NPM packages maintained by victims.
- The variant enables rapid, stealthy propagation across the software supply chain.