Post #2742634

New post: Shai-Hulud Crosses the Ecosystem Boundary. Your MCP Configs Are on the Menu. The same campaign that hit Bitwarden CLI and SAP npm has now crossed to PyPI via PyTorch Lightning (31K stars). New target: MCP configurations. The worm also impersonates Claude Code in poisoned commits. 16 incidents. 9 platforms. 30 days. https://alexreed.srht.site/blog/shai-hulud-crosses-ecosystems.html #SupplyChain #ShaiHulud #MCP #PyPI #AISecurity