
Maven Package Just Got Caught Running Shai-Hulud v2
The same malware family that compromised npm earlier this year has now turned up inside Java packages on Maven Central. This is a serious supply-chain warning for any organisation that relies on Java builds. The short version Attackers pushed trojanised packages containing Shai-Hulud v2, an updated







