Valid provenance is not valid code: a supply-chain worm shipped with a valid SLSA attestation
The Mini Shai-Hulud worm didn't steal a publish token — it abused the CI environment itself, and its packages passed SLSA provenance validation. What attestations prove, what they don't, and the two layers still missing.
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.