top of page
The 10 Most Misunderstood Elements of the DOJ Epstein Release
Reporter Primer #3 -- A reference for journalists, researchers, and anyone writing about the Epstein files.
Patrick Duggan
Feb 287 min read
"I Designed the DJT Business Comeback": What 1,104 DOJ Documents Reveal About Trump and Epstein
The DOJ removed a photo of Howard Lutnick from the Epstein files today. We already had it. We also have 1,103 other documents they'd rather you didn't search.
Patrick Duggan
Feb 278 min read
The Power of Cross-Indexing: How 37 Indexes Exposed What Single-Source Searches Can't
One name. Thirty-seven indexes. 10.9 million documents. The connections only appear when you search everything at once.
Patrick Duggan
Feb 277 min read
"I Designed the DJT Business Comeback": What 1,104 DOJ Documents Reveal About Trump and Epstein
The DOJ removed a photo of Howard Lutnick from the Epstein files today. We already had it. We also have 1,103 other documents they'd rather you didn't search.
Patrick Duggan
Feb 277 min read
The 91 Smoking Guns: Every Explosive Document in the Epstein Files, Ranked
We've spent three weeks indexing 364,000+ DOJ Epstein documents. We published seven deep dives — Trump, Clinton, Putin, Israel, MBS, Silicon Valley, and the...
Patrick Duggan
Feb 2219 min read
"The Jeffrey Epstein & Jes Staley Blackmail Ring": The Complaint Sent to UK Parliament
Someone wrote to UK Parliament about 'The Jeffrey Epstein & Jes Staley Blackmail Ring' in 2020. The FBI preserved the letter. Document EFTA00019889.
Patrick Duggan
Feb 134 min read
Cui Bono: Following Epstein's $538 Million Paper Trail
Cui Bono: Following Epstein's $538 Million Paper Trail
Patrick Duggan
Feb 14 min read
The Epstein Files: Connecting the Dots
The Epstein Files: Connecting the Dots
Patrick Duggan
Jan 305 min read
The Epstein Files: The Al Capone Approach - Simple Crimes That Stick
Stamp 1: SEC Dropped Apollo Investigation After White House Meeting
Patrick Duggan
Jan 304 min read
BUT WAIT THERE'S MORE: Green Machines, Gold Cards, and Docker Moreskin
A Late-Night Shopping Experience for the Modern American Resistance
Patrick Duggan
Jan 296 min read
I Politely Disagree: This Is OUR Fucking City, Not Yours, Commander Bovino
The Man Who Claimed Los Angeles, Chicago, and Now Minneapolis Has a Pattern. We Have Receipts.
Patrick Duggan
Jan 294 min read
GootLoader Reads Backwards: The ZIP Evasion That's Fooling Your Security Stack
GootLoader Reads Backwards: The ZIP Evasion That's Fooling Your Security Stack
Patrick Duggan
Jan 255 min read
Shai-Hulud V2: Anatomy of a Self-Propagating npm Worm
---
title: "Shai-Hulud V2: Anatomy of a Self-Propagating npm Worm"
slug: shai-hulud-v2-npm-supply-chain-worm
date: 2025-12-04
author: Patrick Duggan
tags: [supp
Patrick Duggan
Dec 4, 20254 min read
I Tracked Who's Consuming Our Free Threat Intel Feed. The Results Got Creepy.
I Tracked Who's Consuming Our Free Threat Intel Feed. The Results Got Creepy.
Patrick Duggan
Nov 22, 20258 min read
When Microsoft, Google, and Cloudflare Download Your Threat Intel (And You're Just a Guy in Minnesota)
When Microsoft, Google, and Cloudflare Download Your Threat Intel (And You're Just a Guy in Minnesota)
Patrick Duggan
Nov 22, 20256 min read
Multi-Dimensional Threat Intelligence Analysis: Looking for AI Adversaries (Nov 2025)
Multi-Dimensional Threat Intelligence Analysis: Looking for AI Adversaries (Nov 2025)
Patrick Duggan
Nov 6, 202523 min read
The Case of the Impostor Bot: When AWS Weaponizes Anthropic's Name
Act 1: The Crime Scene November 4, 2025, 12:30 PM. Our OSINT Threat Intelligence Viewer flags 2 IPs for auto-blocking: IP 1: 216.73.216.112 - ISP: "Anthropic,
Patrick Duggan
Nov 4, 20256 min read
Friends Polish Armor: Why Google and Microsoft Respect Anthropic While AWS Weaponizes It
Friends Polish Armor: Why Google and Microsoft Respect Anthropic While AWS Weaponizes It
Patrick Duggan
Nov 4, 202510 min read
The Case of the Impostor Bot: When AWS Weaponizes Anthropic's Name
The Case of the Impostor Bot: When AWS Weaponizes Anthropic's Name
Patrick Duggan
Nov 4, 20256 min read
Friends Polish Armor: Why Google and Microsoft Respect Anthropic While AWS Weaponizes It
Friends Polish Armor: Why Google and Microsoft Respect Anthropic While AWS Weaponizes It
Patrick Duggan
Nov 4, 202510 min read
bottom of page