Back to article

TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages (opens in new tab)

Covers 4 stories including Mini Shai-Hulud - TanStack and more npm packages compromised, with SLSA Build Level 3 provenance attestations

Covers 4 related stories

stepsecurity.io·

Mini Shai-Hulud - TanStack and more npm packages compromised, with SLSA Build Level 3 provenance attestations

Discussed on Lobsters

Tanstack NPM Packages Compromised in Ongoing Supply-Chain Attack

Discussed on Hacker News and r/reactjs

Mini Shai-Hulud Strikes Again: TanStack + more npm Packages Compromised

cert.europa.eu·

European Commission cloud breach: a supply-chain compromise

Discussed on Hacker News