{
  "id": "0e473f141d3f",
  "url": "https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains",
  "title": "Shai Hulud 2.0 Strikes Again: Malware Supply-Chain Attack Hits Zapier & ENS Domains",
  "note": "Another \"supply chain\" attack focusing on npm packages. It is an interesting read and it is really scary how easily these attacks work. This really is one of the biggest challenges of large open source ecosystems — you don't have a clear understanding of who made what and if it is authentic. This is totally solvable using public key cryptography and code signing. But there is a big challenge in doing that since it challenges many of the open concepts of open source software. As an industry though, we need to get this figured out and probably make some tradeoffs. ",
  "voice": "jamie",
  "saved": "2025-12-01T23:05:01Z",
  "host": "aikido.dev",
  "kind": "page",
  "tags": [],
  "record": "https://links.thingelstad.xyz/links/0e473f141d3f/",
  "markdown": "https://links.thingelstad.xyz/links/0e473f141d3f.md",
  "issues": [
    {
      "number": 335,
      "slug": "335",
      "title": "Weekly Thing 335 / Complexity, Fizzy, Soul",
      "date": "2025-12-06T12:00:00Z",
      "section": "Notable",
      "position": 5,
      "url": "https://weekly.thingelstad.com/archive/335/",
      "page": "https://links.thingelstad.xyz/issues/335/"
    }
  ],
  "connections": {
    "same_host": {
      "count": 0,
      "page": "https://links.thingelstad.xyz/hosts/aikido.dev/",
      "nearest": []
    },
    "same_week": {
      "count": 18,
      "nearest": [
        {
          "id": "c64bc55e1cbf",
          "title": "Brief thoughts on the recent Cloudflare outage – Surfing Complexity",
          "url": "https://surfingcomplexity.blog/2025/11/26/brief-thoughts-on-the-recent-cloudflare-outage/",
          "record": "https://links.thingelstad.xyz/links/c64bc55e1cbf/"
        },
        {
          "id": "5f096b9b71ce",
          "title": "Seeing like a software company",
          "url": "https://www.seangoedecke.com/seeing-like-a-software-company/",
          "record": "https://links.thingelstad.xyz/links/5f096b9b71ce/"
        },
        {
          "id": "c91153d296ea",
          "title": "Effective harnesses for long-running agents Anthropic",
          "url": "https://www.anthropic.com/engineering/effective-harnesses-for-long-running-agents",
          "record": "https://links.thingelstad.xyz/links/c91153d296ea/"
        },
        {
          "id": "ccaa6d1d09b3",
          "title": "Fizzy – Kanban as it should be. Not as it has been.",
          "url": "https://www.fizzy.do",
          "record": "https://links.thingelstad.xyz/links/ccaa6d1d09b3/"
        },
        {
          "id": "cee7e3a29089",
          "title": "Dotprompt: Executable GenAI Prompt Templates",
          "url": "https://google.github.io/dotprompt/",
          "record": "https://links.thingelstad.xyz/links/cee7e3a29089/"
        }
      ]
    },
    "mentions": [],
    "mentioned_by": [],
    "saved_twice": []
  },
  "elsewhere": {
    "wayback": "https://web.archive.org/web/*/https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains"
  }
}