Scan repositories for Shai-Hulud 2.0 supply-chain indicators with the detector action
Check repositories and CI surfaces for Shai-Hulud 2.0 compromise indicators when the task is targeted supply-chain triage, not generic malware scanning.
Prerequisites
GitHub Action or local detector CLI, repository or monorepo to scan, and security triage review
Installation
Use the upstream install or setup path that matches your environment:
- STOP - Do not run npm install or any build commands
- npm cache clean --force
- npm install --ignore-scripts # Prevent postinstall hooks
- npm audit
Requirements and caveats from upstream:
- 🔑 THE SUCCESS OF THIS PROJECT DEPENDS ON YOU!
- | PostHog | 62 | posthog-node, posthog-js, @posthog/nextjs, @posthog/plugin-server |
- node scripts/update-ioc-database.js
Basic usage or getting-started notes:
Quick Start •
Source: https://github.com/gensecaihq/Shai-Hulud-2.0-Detector
Extracted from upstream docs: https://raw.githubusercontent.com/gensecaihq/Shai-Hulud-2.0-Detector/HEAD/README.md