Another Shai-Hulud variant hits npm packages, worming its way into hundreds of packages.
A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...