New Shai-Hulud malware wave compromises 600 npm packages
…The latest wave involves the injection of a heavily obfuscated ‘index.js’ payload that attempts to steal GitHub, npm, cloud, Kubernetes, Vault, Docker, database, and SSH credentials. It primarily targets developer workstations…