It's Kinda Like Dune: A Look Into the Shai-Hulud Malware
Speaker: Draggr
Shai-Hulud is a term given by the Fremen of Arrakis to the gargantuan sandworms that inhabits the dunes of Arrakis in Frank Hebert's Dune. Shai-Hulud is also a self-propogating npm worm that has infected tens of thousands of GitHub repositories and affected hundreds of users, with the latest iteration of the malware spotted as of April 2026.
In this presentation, we will look at the findings posted by established malware researchers and highlight their observations in an entertaining way.