Shai Hulud v2: How to Check If Your npm Project Is Compromised (November 2025)
The Shai Hulud v2 (Sha1-Hulud 2.0) worm compromised 800+ npm packages in November 2025, stealing secrets and credentials. Here's how to quickly check if your JavaScript project is affected using an AI agent or manual verification.
