India's CERT-In has warned about 'Shai-Hulud', a malware inspired by the giant sandworms in the 'Dune' novel series. The malware targets JavaScript's node package manager (npm) ecosystem, used by startups, IT firms and others. The attack, which begins with phishing emails spoofing npm, can lead to the exposure of credentials, unauthorised code execution and further supply chain compromise.