A new variant of the Shai-Hulud npm worm has poisoned hundreds of packages while adding propagation techniques that can leave ...