Shai-Hulud 2.0: Inside the Second Coming, the most aggressive npm supply chain attack of 2025 The Shai-Hulud 2.0 campaign, referred to by its operators as The Second Coming, is one of the most extensive and fast moving npm supply chain attacks observed in recent years. Between 21 November 26, 2025 News/Technology News