Threat Research
From npm Install to Egress: A Runtime Account of Shai‑Hulud 2.0
We detonated a Shai-Hulud 2.0 npm package in CI, recorded over an hour of attack telemetry, and blocked exfiltration. A runtime account of a supply chain worm—from npm install to egress.
Garnet Red Team
Threat Research
