Shai-Hulud worm returns, belches secrets to 25K GitHub repos
(2025/11/24)
Trojanized npm packages spread new variant that executes in pre-install phase, hitting thousands within days
The person who's taking you to lunch has no intention of paying.