How the Shai-Hulud npm Attack

The Short Version The Shai-Hulud npm attack returned on 4 August 2026, entering the registry through keyv and the cacheable family of caching libraries, then spreading on its own to...