Shai-Hulud: From npm Worm to Cross-Ecosystem Supply Chain Threat