Hackers have compromised dozens of popular open source packages in an ongoing supply-chain attack
The attacks are part of a wider campaign known as Mini Shai-Hulud, which has already compromised several open source projects and, in turn, developers and companies that use them.
Signal weather
The story has moved beyond the first headline and now acts as a reliable context anchor.
Why now
This story is still moving and pulling follow-up coverage.