Shai Hulud campaign strikes NPM again
research.jfrog.com