Security News Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft TheHackerNews Daniel Bender 24 Nov 2025 Security vendors warn Sha1-Hulud has hijacked 25,000+ GitHub repos via npm packages, stealing cloud credentials or wiping dev home directories.
