Shai-Hulud-Style NPM Worm Hijacks CI Workflows and Poisons AI Toolchains

(socket.dev) by feross | Feb 20, 2026 | 0 comments on HN