npm’s Shai-Hulud Worm Is Getting Scary Fast
Security experts warn that the Shai-Hulud worm is rapidly compromising npm packages and stealing sensitive developer credentials. The malware has already affected over 700 packages with more than 100 million downloads. Organizations are urged to review dependencies immediately.