Shai-Hulud malware compromises TinyColor and 40+ npm packages - prijm