Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages
last 60 dispatches · spectrum
Shai-Hulud npm worm spreads through Keyv and hundreds of packages with 2 billion monthly downloads, stealing npm, GitHub, cloud and CI credentials in real time.