Mini Shai-Hulud returns, compromising hundreds of npm packages

Multiple high-impact supply-chain and software-distribution incidents: the “Mini Shai‑Hulud” malware wave has returned, compromising hundreds of npm packages to steal publishing tokens, deploy OS‑level backdoors and persist in developer tools/CI pipelines. Microsoft disrupted “Fox Tempest,” a cybercrime service that abused software verification/code‑signing to push malware (including to ransomware operators). Separately, a Cisco zero‑day (SD‑WAN/firewall family) is under active exploitation by a persistent group. Law‑enforcement actions (Interpol’s Operation Ramz) disrupted phishing/malware/fx