The Shai-Hulud NPM Supply Chain Attack: A Comprehensive Analysis of Self-Replicating Malware in the JavaScript Ecosystem
In September 2025, the JavaScript ecosystem experienced one of its most sophisticated supply chain attacks to date, dubbed "Shai-Hulud" after the fictional sandworms from the Dune universe. This attack represents a paradigm shift in software supply ch
Authors
- Surya Rao Rayarao (ORCID: https://orcid.org/0009-0001-8467-7865)
- Naga Donikena
Institutions
- The University of Texas at Austin (US)
Publication Details
- Published
- 2025-09-19
- DOI
- https://doi.org/10.22541/au.175830854.42750868/v1
- Primary Topic
- Advanced Malware Detection Techniques
- Type
- article
- Field-Weighted Citation Impact
- 0.00