May 19 2026 Shai-Hulud copycat worm infects yet another npm package Source Plus three other stealers in three other packages, all from the same scumbag [...]