Shai-Hulud compromised a dev machine and raided GitHub org access: a post-mortem | Not Hacker News!