Thumper

Deception tool that plants realistic fake credentials in the locations the Shai-Hulud npm worm scans; the moment one is read, it signals a likely compromise. Provides early-warning detection of supply-chain worm activity on developer machines and build systems.