Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise

Credential-stealing malware detected within minutes of npm release, but impact remains unknown