A researcher reported that more than 400 NPM libraries, including a cluster of ENS-linked crypto packages, were breached by the Shai Hulud malware.