Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens
• Cybersecurity researchers have disclosed what they say is an active ‘Shai-Hulud-like’ supply chain worm campaign that has leveraged a cluster of at least 19 malicious npm package