Shai-Hulud 2.0 Malware Attack Compromised 30,000 Repositories and Stolen 500 GitHub Usernames and Tokens
On Mon, Nov 24, 2025, a new supply chain security breach was identified involving Shai-Hulud 2.0 malware. This malware has compromised over 30,000 GitHub repositories, posing a significant risk to the developer ecosystem.
On Mon, Nov 24, 2025, a new supply chain security breach was identified involving Shai-Hulud 2.0 malware. This malware has compromised over 30,000 GitHub repositories, posing a significant risk to the developer ecosystem.
Shai-Hulud 2.0 targets the NPM package manager and spreads across various platforms, including Maven and OpenVSX. The malware infiltrates systems through compromised NPM packages, primarily affecting @postman/tunnel-agent version 0.6.7 and @asyncapi/specs version 6.8.3, which together account for over 60 percent of infections.
Upon execution during the package installation phase, a pre-install script runs automatically, establishing persistence and initiating credential harvesting operations. The malware searches for existing GitHub credentials within compromised environments and uses them to upload additional malicious repositories, resulting in a cascading chain of infections.
On Mon, Nov 24, 2025, a new supply chain security breach was identified involving Shai-Hulud 2.0 malware.
Wiz.io security analysts have reported that the malware has stolen approximately 500 unique GitHub usernames and tokens from compromised repositories. Additionally, up to 400,000 secrets were exfiltrated, with about 2.5 percent verified as legitimate. Over 60 percent of leaked NPM tokens remain valid, posing an ongoing risk for further supply chain attacks.
Credential Harvesting and Persistence Mechanisms
The infection mechanism involves injecting malicious code into the pre-install lifecycle script, which executes during package installation. The malware collects environment variables and system information, creating a detailed fingerprint of each compromised system. Most infections occur on Linux-based containers within CI/CD environments, with GitHub Actions being the primary target.
The malware attempts to extract cloud secrets from AWS, Google Cloud, and Azure environments. However, implementation flaws due to missing error handling have limited the scope of cloud credential theft. Despite this, local secrets and development credentials remain compromised across numerous organizations worldwide.
Based on reporting by Cyber Security News.