Shai-Hulud Worm Steals npm, GitHub, AWS, and Kubernetes Secrets From Developers

**Shai-Hulud is a self-propagating supply-chain worm that targets developer environments and cloud credentials (npm, GitHub, AWS, Kubernetes), implants backdoors into npm packages to spread, and was publicly released by a group called TeamPCP—significantly increasing the risk of widespread adoption and exploitation; the report includes technical behavior, mitigation advice, and a set of IoCs.**