# Is second wave of Shai-Hulud attack impacting Elastic Stack?

**URL:** https://discuss.elastic.co/t/is-second-wave-of-shai-hulud-attack-impacting-elastic-stack/383724
**Category:** Kibana
**Tags:** elastic-stack-security
**Created:** [November 27, 2025, 9:49am UTC](https://discuss.elastic.co/t/is-second-wave-of-shai-hulud-attack-impacting-elastic-stack/383724 "2025-11-27T09:49:08Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![hkw2pg1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hkw2pg1/32/145926_2.png) [@hkw2pg1](https://discuss.elastic.co/u/hkw2pg1)
#### Post date: [November 27, 2025, 9:49am UTC](https://discuss.elastic.co/t/is-second-wave-of-shai-hulud-attack-impacting-elastic-stack/383724/1 "2025-11-27T09:49:08Z")

</div>

The Shai-Hulud attack came back again with approximately 800 npm packages impacted.

To which extend is this article still stand? → [Navigating the Shai-Hulud worm: Elastic's proactive defense against npm supply chain compromise | Elastic Blog](https://www.elastic.co/blog/shai-hulud-worm-npm-supply-chain-compromise) from Elastic blog

---

<div class="post-metadata">

### Author: ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)
#### Post date: [December 1, 2025, 5:00pm UTC](https://discuss.elastic.co/t/is-second-wave-of-shai-hulud-attack-impacting-elastic-stack/383724/2 "2025-12-01T17:00:18Z")

</div>

Hi @hkw2pg1,

Thanks for checking in. As stated in the bottom of the post:

> We will continue to monitor new information, and as we learn more about this event, we will update this publication

We are indeed monitoring the latest wave and will update the publication with new information when available. However, if you have further specific questions feel free to contact [security@elastic.co](mailto:security@elastic.co).

Hope that helps!
