Massive supply-chain attack compromises 440 packages under four hours

Researchers from multiple security firms observed a variant of Mini Shai-Hulud, self-replicating malware linked to TeamPCP, in all the affected packages. The...