On November 24th, 2025, Snyk detected a new supply chain attack called SHA1-Hulud impacting the npm ecosystem. This appears to be a second wave of the Shai-Hulud attack from September 2025. Over 700 packages are believed to be compromised in this active incident. Snyk has released a Featured Zero Day Report to help organizations determine if they have been impacted. The company continues to monitor the situation through their Trust Center and will update the report as new advisories are added and projects are re-tested.