🚨 Shai-Hulud is back. Hours ago. Still spreading. 440+ npm packages. 1,600+ versions. 2B+ monthly downloads - and the count is climbing. Here's what happened, why your sandbox won't catch it, and how we block it at runtime. A thread 🧵 (1/8)

We built for this - not just which domain, but which paths, methods, and body are allowed inside it. api.github.com stays open. Exfil repo: blocked before a byte leaves. That shape of attack doesn't have a path to happen. The model proposes. The runtime decides. (7/8)