A malicious Tensorlake npm release carries a Shai-Hulud worm variant that steals developer secrets and spreads through ...