TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #7955
@thehackernews
The Hacker News
Post content
Post content
🔥 New npm attack DETECTED! A campaign dubbed “Sha1-Hulud: The Second Coming” has compromised hundreds of packages and over 25,000 GitHub repos. The code runs during install, steals cloud logins, and if that fails, it deletes the user’s home folder. Read more ↓ https://thehackernews.com/2025/11/second-sha1-hulud-wave-affects-25000.html