Happy Birthday, Shai-Hulud

The Shai-Hulud supply chain worm has been active for one year, targeting npm packages like @ctrl/tinycolor to harvest credentials and self-propagate across development environments. The threat has evolved to exploit OIDC tokens and continues spreading through multiple waves. Any organization using compromised npm dependencies faces credential theft and potential lateral movement into their infrastructure.