Threat Research
Shai-Hulud v2: The Runtime Anatomy of a Supply Chain Worm
We detonated a Shai-Hulud 2.0 npm package live in CI, recorded runtime telemetry of a supply chain worm—from npm install to exfiltration.
Garnet Red Team
Threat Research
Resources
Research, deep-dives, and learnings from the Garnet team.