Shai-Hulud variant compromises dozens of open-source Microsoft packages. CyberWire