Shai-Hulud, the TanStack OIDC hijack, mini Shai-Hulud — a layered, copy-paste playbook to lock down your npm dependency pipeline before you get hit.