Information security
fromSecurityWeek
1 week agoOver 320 NPM Packages Hit by Fresh Mini Shai-Hulud Supply Chain Attack
A compromised NPM maintainer account published malicious package versions that triggered multi-stage credential theft and persistence across CI environments and developer tooling.