Shai-Hulud worm infects npm packages https://www.securitricks.com/reports/shai-hulud-worm-infects-npm-packages/