A new malware named 'Mini Shai-Hulud' has been detected in several code packages downloaded by developers every day to build software. The malware can steal GitHub passwords/tokens, cloud credentials (AWS, Google Cloud, Azure), developer secrets and company deployment keys and can spread itself automatically by hitting the software supply chain. It's named after the giant worm from 'Dune' trilogy.