Why Scanners Fail in Practice: Lessons from the Shai-Hulud Attacks on NPM | Dark Hacker News