Shai-Hulud npm worm spreads through Keyv and hundreds of packages with 2 billion monthly downloads, stealing npm, GitHub, cloud and CI credentials in real time.
First seen on hackread.com
Jump to article: hackread.com/shai-hulud-npm-worm-poisoning-1280-packages/
![]()

