Hulud 2.0,' has created a severe supply chain crisis, compromising key platforms like Zapier, PostHog, and Postman.

Postman API is a powerful and widely-used platform for API development, testing, and collaboration. It allows developers to design, mock, debug, and automate API workflows in a user-friendly ...

The Postman MCP Server connects Postman to AI tools, giving AI agents and assistants the ability to access workspaces, manage collections and environments, evaluate APIs, and automate workflows ...

Hundreds of trojanized versions of well-known packages such as Zapier, ENS Domains, PostHog, and Postman have been planted in ...

The latest version also executes malicious code during the preinstall phase, and is bigger and faster than the first wave, ...

The attackers have learned from their mistakes and have now developed a more aggressive version of the worm. It has already ...

While the September 2025 Shai-Hulud attack focused primarily on credential harvesting and self-propagation, this new variant ...

Trojanized npm packages spread new variant that executes in pre-install phase, hitting thousands within days A ...