Shai-Hulud & the Death of Trust: How Modern Supply Chain Attacks Are Bypassing CI/CD Security
The Shai-Hulud campaign represents a major evolution in software supply chain attacks — combining CI/CD compromise, GitHub Actions abuse, autonomous worm propagation, and valid SLSA provenance bypasses into a highly scalable threat model.