… Due to large malware campaigns, such as SHA1-Hulud , GitHub saw a 69% increase in published malware advisories compared to 2024. This is the most malware advisories GitHub has published since our initial release of historical malware when we added support in 2022 . …
… Strengthening supply chain security: Preparing for the next malware campaign Security advice for users and maintainers to help reduce the impact of the next supply chain malware attack. …
… Strengthening supply chain security: Preparing for the next malware campaign Security advice for users and maintainers to help reduce the impact of the next supply chain malware attack. …
… What to expect in the coming months In late 2025 the Shai-Hulud attacks motivated a revamped security roadmap for npm, which we talked about in Our plan for a more secure npm supply chain and Strengthening supply chain security: Preparing for the next malware campaign . …