Shai-Hulud-Style NPM Worm Hijacks CI Workflows and Poisons AI Toolchains · HackerTrans