The Shai Hulud malware has compromised over 400 NPM libraries, including at least 10 crypto-related packages mostly linked to Ethereum Name Service (ENS), in a major JavaScript supply-chain attack. This self-replicating threat steals credentials, potentially exposing wallet keys in developer environments, as identified by Aikido Security researcher Charlie Eriksen. Over 400 NPM packages infected: Includes [...]