The Shai-Hulud 2.0 npm worm: analysis, and what you need to know