Sha1-Hulud Supply Chain Attack: 800+ npm Packages and Thousands of GitHub Repos Compromised

https://cybersecuritynews.com/sha1-hulud-supply-chain-attack/