Shai-Hulud Worm Steals Dev Secrets Across npm, GitHub, AWS & Kubernetes

Shai-Hulud is a self‑propagating npm worm targeting developer environments and CI/CD (notably GitHub Actions) to harvest GitHub, AWS, Kubernetes, and other secrets; it can alter and republish npm packages to propagate through the supply chain and was publicly released by a group called TeamPCP, leading to rapid forks and increased global risk.