Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised | Hacker News

A new npm supply-chain attack, dubbed Mini Shai-Hulud, compromised 314 packages.

The malware searched for developer credentials and attempted multiple ways to escape Docker containers.

The incident highlights how package malware can spread quickly and expose secrets across the software supply chain.