Shai-Hulud NPM attack

[FlachyJoe]

Hi!
What's your current recommendation about the NPM environment compromision by the so-named Shai-Hulud worm?

Could we still update MeshCentral without risks?

[si458]

Links??? Not header about other npm attacks apart from one other week which we checked and we arent effected by it

[FlachyJoe]

I've only read mainstream media reports like https://www.securityweek.com/shai-hulud-supply-chain-attack-worm-used-to-steal-secrets-180-npm-packages-hit/ or https://www.wiz.io/blog/shai-hulud-npm-supply-chain-attack
And https://github.com/Cobenian/shai-hulud-detect

[si458]

just had quick look at packages exposed, we dont use ANY of them, we are old school here 👍
looks quite serious tho! will readup a little more about it when i get chance tonight in bed 👍