Latest Articles
Aug 7, 2026 | Supply Chain Security
Shai-Hulud Returns: ChainDrop Worm Hits npm, Infecting Hundreds of Packages
The self-propagating worm is back. This time it poisoned keyv, an npm caching library that ships in millions of builds, and it plants a second trigger that fires the next time a developer just opens the project.
Dec 4, 2025 | Supply Chain Security
Shai-Hulud 2.0: How to Secure Your Software Supply Chain Against the Second Wave
Sign up for the OPSWAT Newsletter
Get the latest OPSWAT company updates along with event information and
the news that's driving the industry forward.
