Shai-Hulud 2.0: Inside the Most Sophisticated npm Supply Chain Attack of 2025

Most software supply chain attacks target a single package, compromise a single maintainer, and create a localized incident. Shai-Hulud was…