A fresh Mini Shai-Hulud supply chain attack has hit over 320 NPM packages, along with GitHub Actions and a VS Code extension.
Hulud, which has already compromised several open source projects and, in turn, developers and companies that use them.