Malicious NPM packages: Are you exposed?

Sysdig Threat Research Team describes the Shai-Hulud NPM supply-chain worm — a self‑propagating malware that rapidly infected hundreds of JavaScript packages, stole credentials, and replicated to additional packages — and promotes Sysdig’s Threat Intelligence Feed which provides real‑time detection, impact confirmation, and investigation queries to help organizations assess and respond to exposure.