UNVERIFIEDSingle SourceThe Shai-Hulud npm worm didn't fake its security check — it earned a legitimate one - VentureBeatVentureBeat AI|8/5/2026