A PHP developer shares a firsthand experience of being affected by the Shai-Hulud npm supply chain attack through a Node.js tool (Optic) used in a PHP project's CI pipeline. The attack exploited post-install scripts in infected npm packages to steal credentials. Fortunately, the CI environment lacked sensitive variables, Show more