Bun and done: The second coming of the Shai-Hulud worm Red Canary By: The Red Canary Team 10 December 2025 at 17:58 Everything you need to know to detect and prevent npm compromises from Shai-Huludβs latest campaign