Shai-Hulud full npm compromise

Detection for shai-hulud supply chain attack. All npm packages. [Why not externaldata()? 'cause it is computationally expensive, and it may not run)