npm Finally Intervenes in ‘Mini Shai-Hulud’ Crisis, but Crypto Security Experts Call It Half-Measure

As npm invalidates compromised developer accounts linked to the ‘Mini Shai-Hulud’ worm, security researchers expose lingering local backdoors targeting crypto seed phrases.