Shai-Hulud-Style NPM Worm Hijacks CI Workflows and Poisons AI Toolchains
socket.dev