Skip to content
corpus.blog
Sign in Claim your blog
Record · aikido.dev

Shai Hulud Launches Second Supply-Chain Attack: Zapier, ENS, AsyncAPI, PostHog, Postman Compromised

aikido.dev · 13 min read

A post on aikido.dev is cited by 8 distinct blogs to date (corpus.blog, measured 11 October 2026).

A record is what was published and who pointed at it. The text of the post is not shown here: read it at the source, or at its Wayback capture.

Read at aikido.dev (opens in a new tab) Wayback capture (opens in a new tab)

8blogs citing

Citing blogs and links by period
Period Blogs Links
All time88
Last 90 days00
Last 30 days00
Last 7 days00
Figures for this page
First cited24 Nov 2025
Latest citation9 Apr 2026
Words blogs link it with5
External links6
Length2,861
New citing blogs a weeksince Nov 2025
New citing blogs a week, since Nov 2025: 46 weeks, peak 3 a week, latest week 0

0 this week (still settling) · peak 3

Show as table
New citing blogs a week, week by week
Week of Value
24 Nov 20253
1 Dec 20251
8 Dec 20251
15 Dec 20250
22 Dec 20250
29 Dec 20250
5 Jan 20260
12 Jan 20260
19 Jan 20260
26 Jan 20260
2 Feb 20260
9 Feb 20260
16 Feb 20260
23 Feb 20260
2 Mar 20260
9 Mar 20260
16 Mar 20260
23 Mar 20260
30 Mar 20260
6 Apr 20261
13 Apr 20260
20 Apr 20260
27 Apr 20260
4 May 20260
11 May 20260
18 May 20260
25 May 20260
1 Jun 20260
8 Jun 20260
15 Jun 20260
22 Jun 20260
29 Jun 20260
6 Jul 20260
13 Jul 20260
20 Jul 20260
27 Jul 20260
3 Aug 20260
10 Aug 20260
17 Aug 20260
24 Aug 20260
31 Aug 20260
7 Sept 20260
14 Sept 20260
21 Sept 20260
28 Sept 20260 (still settling)
5 Oct 20260 (still settling)

Each blog counts once, in the week of its first citation. 2 blogs have no dated post that cites this page: counted in the tally, not here. A blog added to the index recently can bring old first citations in at once.

Who cited it

Cited by 8 blogs across 1 subject: technology 6, unclassified 2.

Words blogs link it with

The words blogs link this page with, by how many different blogs use them.

  • aikido3 blogs
  • aikdo: shai hulud launches second supply-chain attack: zapier, ens, asyncapi, posthog, postman compromised1 blog
  • aikido blog post1 blog
  • aikido | shai hulud launches second supply-chain attack1 blog
  • here1 blog

Cited by 8 blogs in 8 posts

One row per blog, the most recently citing first. Each shows the blog's newest citing post; open a row for the others.

Blog
Newest citing post
Date
sarvendev.com1 post
How I got affected by Shai-Hulud in PHP World

linked as “here”

Read at sarvendev.com (opens in a new tab)
9 Apr 2026
Red Canary1 post
Bun and done: The second coming of the Shai-Hulud worm

linked as “Aikido”

Read at redcanary.com (opens in a new tab)
10 Dec 2025
blog.ulisesgascon.com1 post
Newsletter #010: Wrapping Up the Year with Talks, Security Work and Big Releases 🎁

linked as “aikido | Shai Hulud Launches Second Supply-Chain Attack”

Read at blog.ulisesgascon.com (opens in a new tab)
3 Dec 2025
asyncapi.com1 post
Shai-Hulud — What Happened, How We Fixed It, and What We Learned

linked as “Report by Charlie Eriksen”

Read at asyncapi.com (opens in a new tab)
26 Nov 2025
PyPI Blog1 post
PyPI and Shai-Hulud: Staying Secure Amid Emerging Threats

linked as “Aikido”

Read at blog.pypi.org (opens in a new tab)
26 Nov 2025
Sonatype Blog1 post
Second Coming of Shai-Hulud: Attackers Innovate on npm

linked as “Aikido”

Read at sonatype.com (opens in a new tab)
24 Nov 2025
Microsoft Research1 post
Shai-Hulud 2.0: Guidance for detecting, investigating, and defending against the supply chain attack

linked as “aikdo: Shai Hulud Launches Second Supply-Chain Attack: Zapier, ENS, AsyncAPI, PostHog, Postman Compr…”

Read at microsoft.com (opens in a new tab)
—
stepsecurity.io1 post
Sha1-Hulud: The Second Coming" name="description"/><meta content=

linked as “Aikido blog post”

Read at stepsecurity.io (opens in a new tab)
—

Links from this post

Link
Host
Elsewhere on aikido.dev (5)

Something wrong here? Report a problem