New Shai-Hulud malware wave compromises 600 npm packages
From BleepingComputer to All on Tue May 19 10:44:09 2026
Threat actors earlier today published more than 600 malicious packages to the Node Package Manager (npm) index as part of a new Shai-Hulud supply-chain campaign. [...]