Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

A lot of blogs on this are AI generated and such as this is developing, so just linking to a bunch of resources out there: Socket: - Sep 15 (First post on breach): https://socket.dev/blog/tinycolor-supply-chain-attack-affect... - Sep 16: https://socket.dev/blog/ongoing-supply-chain-attack-targets-... StepSecurity – https://ift.tt/goRQUvJ... Aikido - https://ift.tt/uxthV4L... Ox - https://ift.tt/1TMvZE7... Safety - https://ift.tt/oWFvb9Y Phoenix - https://ift.tt/gmKJwuc Semgrep - https://ift.tt/uOWtG7j... September 16, 2025 at 04:22PM