The Keyv/Cacheable npm Worm: A Confirmed "Mini Shai-Hulud" Descendant That Backdoors Claude Code and VS Code — A Defender's Technical Report

“Produce a defender-focused deep report on: npm caching-package worm confirmed as "Mini Shai-Hulud" descendant — now plants backdoors in Claude Code and VS Code. Explain in technical terms what the underlying weakness is and why it occurs, the full affected and fixed version matrix, whether it is being exploited in the wild and how widely (with the evidence defenders can independently verify), dete”