Shai-Hulud 2.0 NPM malware attack last week exposed up to 400,000 dev secrets after infecting hundreds of packages in the NPM registry and publishing stolen data in 30,000 GitHub repositories.