npm

Scott and Wes analyze the "Shai-Hulud" worm, a supply chain attack exploiting GitHub Actions cache poisoning to compromise npm packages like TanStack. They detail the attack