Developer Tech

npm supply-chain attack hits 400+ packages and steals developer credentials

A Mini Shai-Hulud worm spread through more than 400 npm packages, stealing npm, GitHub, cloud, and CI/CD credentials.