Sha1-Hulud 2.0: The Second ComingThe first self-replicating worm that compromised npm packages with cloud token-stealing malwareNov 25, 2025·3 min read·31