Shai-Hulud copycat worm infects yet another npm package from www.theregister.com - Articles on 2026-05-18 22:07 (#75Q56) Plus three other stealers in three other packages, all from the same scumbag
