Massive NPM Supply-Chain Attack Targets ENS-Linked Libraries in Shai Hulud Breach

NPM supply-chain attack has infected 490 packages tied to ENS, Zapier, AsyncAPI and others, has harvested developer credentials via the Shai-Hulud malware, has raised concerns over unmonitored package ecosystems after an earlier $50 million crypto theft, and has exposed API keys and CI/CD secrets.