Shai-Hulud keeps burrowing: 314 npm packages infected after another account compromise from www.theregister.com - Articles on 2026-05-19 12:58 (#75QKX) Popular JavaScript modules including size-sensor and echarts-for-react hit as hijacked account closed GitHub warnings
Miasma worms its way onto GitHub as attack kit goes open source from www.theregister.com - Articles on 2026-06-09 18:05 (#766P2) As if there weren't enough package poisonings to worry about