Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

Posted by jamesberthoty on 2025-09-16 · socket.dev

Discussion record

The captured thread is incomplete, so Clue is withholding a summary rather than presenting a partial account as complete.

The summary gate never changes the score, comment count, story metadata, or retained-history figures above.