Technology

Shai-Hulud: Whoever controls your package registry controls your pipeline

August 31, 2026 2,575 views 1 min read
Shai-Hulud: Whoever controls your package registry controls your pipeline

Shai-Hulud: Whoever controls your package registry controls your pipeline


On September 15, 2025, npm’s registry did something unprecedented: Packages began updating themselves. No maintainer ran npm publish. No pull The post Shai-Hulud: Whoever controls your package registry controls your pipeline appeared first on The New Stack .

Tags