Shai Hulud attack ships signed malicious TanStack, Mistral npm packages

A large-scale software supply-chain attack involving the "Shai-Hulud" malware has compromised hundreds of packages across open-source software ecosystems.