Mini Shai-Hulud is a self-propagating credential-stealing worm delivered through a large, heavily obfuscated Bun-based JavaScript payload. It executes automatically via npm preinstall lifecycle hooks, steals GitHub credentials, and injects configuration files into repositories to establish persistence and create developer-to-developer infection paths.