sovai Sovai

SHA1-hulud Supply Chain Attack Scanner

A bash script to detect indicators of compromise from the SHA1-hulud npm supply chain attack.

Background

SHA1-hulud is a supply chain attack targeting npm packages discovered in late 2025. Attackers compromise legitimate npm maintainer accounts and publish malicious versions that execute code during npm install.

Reference: https://thehackernews.com/2025/11/second-sha1-hulud-wave-affects-25000.html

	<template>
	<div :test="$helpers.foo1()" :test2="bar()"></div>
	</template>

	<script>
	import { bar } from '@/helpers/utils';
	</script>