https://advisories.gitlab.com/npm/@antstackio/shelbysam/GMS-2025-36/
@antstackio/shelbysam contains malware after npm account takeover | GitLab Advisory Database (GLAD)
GMS-2025-36 @antstackio/shelbysam contains malware after npm account takeover: On November 24th 2025, a new supply chain attack called Shai-Hulud 2.0 was...