多個 Node.js 模組在供應鏈攻擊中遭到入侵以收集認證 (Shai-Hulud) (2025 年 11 月 25 日)

critical Nessus Plugin ID 265897

版本 1.6

Jan 5, 2026, 10:40 PM

  • Detection (Added Check for OS Managed Packages)
  • Detection (Exclude certain ZTE CGSL directories by default. Modified Plugins to call Nodejs specific functions for reporting)

Plugin Feed: 202601052240

版本 1.5

Nov 26, 2025, 1:15 PM

  • Plugin metadata (Added new references and updated metadata)

Plugin Feed: 202511261315

版本 1.2

Sep 27, 2025, 7:42 AM

  • Plugin metadata (Added Shai-Hulud, changed date format)

Plugin Feed: 202509270742

版本 1.1

Sep 25, 2025, 11:29 PM

  • New

Plugin Feed: 202509252329

* Changelogs are generally available for changes made after Nov 1, 2022