Shai-Hulud, the TanStack OIDC hijack, mini Shai-Hulud — a layered, copy-paste playbook to lock down your npm dependency pipeline before you get hit.

After the Axios npm RAT, which supply chain security tool would have caught it? A vendor-neutral comparison of malware-aware scanners vs CVE-based SCA.