#npm

Shai-Hulud Supply Chain Attack

How a self-spreading npm worm turned stolen maintainer tokens into a cascading supply-chain compromise across hundreds of packages.