Shai-Hulud 2.0 npm supply-chain attack

Update: our RCA has been posted here. Postman has discovered unusual activity in our NPM org relating to the ongoing “Shai-Hulud 2.0 npm supply-chain attack.” Our security engineering team is investigating the matter and thus far has concluded…

This is an excerpt. The full article continues at Postman.