Shai-Hulud Worm Compromises 180+ NPM Packages: Steals Secrets via GitHub Actions
Husain Parvez Published on: September 19, 2025 Writer A large-scale supply chain attack has compromised over 180 NPM packages, including the widely used @ctrl/tinycolor, which alone sees over 2 million…