Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks