Sha1 Hulud

SHA1-HULUD 🪱 The self-propagating open-source worm exploiting the internet in real time. • Microsoft reportedly impacted recently • Congress demanding investigation • Devs just open sourced the code • Harvests GitHub + cloud creds • Spreads through poisoned npm packages SHA1-HULUD : “The Second Coming” • The hackers chose this name not just as a thematic nod, but because the worm creates hundreds of public GitHub repositories describing itself as "Sha1-Hulud: The Second Coming" • The name is a direct play on Shai-Hulud, the sacred name given to the colossal, worshiped sandworms of the desert planet Arrakis in Frank Herbert's Dune franchise (and the subsequent film adaptations).