A researcher found Shai Hulud malware in more than 400 NPM libraries, including at least 10 crypto packages tied to ENS. The intrusion heightens supply-chain risk for developers and ENS users.