Security News New Shai-Hulud malware wave compromises 600 npm packages BleepingComputer Daniel Bender 19 May 2026 Share Threat actors earlier today published more than 600 malicious packages to the Node Package Manager (npm) index as part of a new Shai-Hulud supply-chain campaign.