New Shai-Hulud malware wave compromises 600 npm packages
Source: BleepingComputer · Category: Supply Chain
600+ malicious npm packages (Shai-Hulud campaign) published to Node Package Manager. If firm's development, matter management, or infrastructure teams use npm dependencies, conduct urgent supply chain audit; recommend blocking or re-vetting npm packages in use.