Code Insight does not detect Shai-Hulud compromised npm packages. It focuses on known vulnerabilities (CVEs) and license compliance issues, so it does not identify malware-based supply chain attacks unless they are cataloged in public vulnerability databases.

Checking Your Environment for Potential Exposure

To check your environment for potential exposure, perform the following steps:

1. Download the shai-hulud.txt attachment from this article.
2. Search your inventory or scan results for any packages listed in the file.
3. Remove or replace any compromised packages you identify.

https://www.revenera.com/blog/software-composition-analysis/shai-hulud-threat/