New IronWorm malware hits 36 packages in npm supply-chain attack

Amazon Japan is now transporting packages on Shinkansen bullet trains

GitHub links repo breach to TanStack npm supply-chain attack

Compromised Mistral and TanStack packages may have exposed GitHub, cloud and CI/CD credentials in 'mini Shai Hulud' malware infection — supply-chain campaign spreads across npm developer ecosystems like wildfire