偵測

多個 Node.js 模組在供應鏈攻擊中遭到入侵以收集認證 (Shai-Hulud) (2026 年 11 月 5 日)

critical Nessus Plugin ID 265897

語言:

版本 1.8

May 14, 2026, 9:29 PM

  • Detection (extended Shai-Hulud npm package coverage to include the mini-shai-hulud variant; added 170 newly-compromised packages)

Plugin Feed: 202605142129

版本 1.6

Jan 5, 2026, 10:40 PM

  • Detection (Added Check for OS Managed Packages)
  • Detection (Exclude certain ZTE CGSL directories by default. Modified Plugins to call Nodejs specific functions for reporting)

Plugin Feed: 202601052240

版本 1.5

Nov 26, 2025, 1:15 PM

  • Plugin metadata (Added new references and updated metadata)

Plugin Feed: 202511261315

版本 1.2

Sep 27, 2025, 7:42 AM

  • Plugin metadata (Added Shai-Hulud, changed date format)

Plugin Feed: 202509270742

版本 1.1

Sep 25, 2025, 11:29 PM

  • New

Plugin Feed: 202509252329

* Changelogs are generally available for changes made after Nov 1, 2022