Shai-hulud 2.0 Variant Threatens Cloud EcosystemThe latest attack from the self-replicating, npm-package poisoning worm can also steal credentials and secrets from AWS, Google Cloud Platform, and Azure. December 1, 2025