AI Mini Shai-Hulud Hits npm Hackers compromise dozens of popular open source packages in ongoing supply chain attack May 19, 2026 · 3:36 PM UTC 5 min read