Shai-Hulud: Ongoing Package Supply Chain Compromise Delivering Data-Stealing Malware