npm

Infected NPM Packages: Shai-Hulud Swallowed the Supply Chain

The Shai-Hulud worm turned 2026 into the year of infected npm packages — see how the attack works, who was hit, and how to harden your pipeline.