Massive resurgence of Shai-Hulud malware targeting npm ecosystem, compromising at least 800 high-profile publisher accounts. Attackers upload trojanized versions of legitimate packages that execute via install lifecycle scripts. The malware uses a 'bring your own runtime' technique by downloading Bun JavaScript runtime to evade detection. Campaign affects tens of thousands of GitHub repositories and high-profile integrations including Zapier, ENS Domains, and Postman. More aggressive than previous iterations, attempting to destroy victim's home directory and delete user files. Executes through preinstall scripts that trigger setup_bun.js upon package installation.