Enterprise IT Mini Shai-Hulud: How the npm Worm Bypassed SLSA Provenance The Inflection Point of Software Supply Chain Security The security of the global open-source ecosystem reached a critical, irreversible…