Malicious NPM packages: Are you exposed?

Sysdig Threat Research reported the discovery of Shai-Hulud, a novel self-replicating worm that rapidly infected hundreds of NPM packages, stole credentials, and propagated across additional packages; Sysdig is monitoring the campaign and publishing real-time intelligence via its Threat Intelligence Feed, including a Top 20 Malicious NPM Packages list and investigation queries to help organizations determine exposure and respond quickly.