A new Shai-Hulud supply-chain campaign, tracked as Trinitite, has compromised the npm package ...