Hackers can bypass npm’s Shai-Hulud defenses via Git dependencies

https://www.bleepingcomputer.com/news/security/hackers-can-bypass-npms-shai-hulud-defenses-via-git-dependencies/