Robuta

https://advisories.gitlab.com/npm/scgsffcreator/GMS-2025-610/ scgsffcreator contains malware after npm account takeover | GitLab Advisory Database (GLAD) GMS-2025-610 scgsffcreator contains malware after npm account takeover: On November 24th 2025, a new supply chain attack called Shai-Hulud 2.0 was launched.... account takeovercontainsmalwarenpm