Shai-Hulud Malicious GitHub Workflow Creation — Detection Rule

Detects creation of shai-hulud-workflow.yml file associated with Shai Hulud worm targeting NPM supply chain attack that exfiltrates GitHub secrets

Read the full analysis on IntelFusions