Topic
Mini Shai Hulud is no longer just an npm problem
By: eevelweezel
Date: June 11, 2026, 6 p.m.
Mini Shai Hulud is self-propagating malware that steals credentials from developer machines and CI/CD pipelines. It was first reported infecting npm packages in 2025, but as of May 2026, it has spread to PyPI. This talk will cover how Shai Hulud works and some of the mitigation strategies discussed at PyCon.