Massive Worm-Style Attack Hits NPM, Puts Crypto Wallet Credentials at Risk
A fast-spreading supply chain attack known as Shai-Hulud has infected hundreds of npm packages and exposed sensitive developer credentials, including GitHub tokens, cloud keys and crypto wallet data. The campaign began in…