On May 19, 2026, a malicious actor compromised npm account atool, affecting over 300 packages with a sophisticated payload stealing credentials and maintaining persistence.
Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised
