Massive “Worm-Style” Attack Spreads Across 187 npm Packages, Hitting CrowdStrike and 2M+ Downloads

A sophisticated supply chain attack called 'Shai-Hulud' has compromised 187 npm JavaScript packages, including popular ones with millions of weekly downloads. The self-propagating malware automatically spreads by modifying package files, harvests credentials using legitimate security tools...