Is Shai Hulud a risk for Vaadin Developers?

[knoobie (Christian Knoop)]

The same applies as previously: Is Vaadin build affected by attacks on npm packages?