Back to article
Tenable Blog

Mini Shai-Hulud: Frequently asked questions about the TeamPCP npm and PyPI supply chain campaign (opens in new tab)

Covers 8 stories See all stories this covers including Postmortem: TanStack NPM supply-chain compromiseCovered by thehackernews.com, therecord.media

Covers 8 related stories

TanStack Blog·

Postmortem: TanStack NPM supply-chain compromise

Feeds
GitHub·

Critical: Compromised Nx Console version 18.95.0

Discussed on Hacker News
Feeds
github.blog·

Investigating unauthorized access to GitHub’s internal repositories

Discussed on Hacker News
Feeds
stepsecurity.io·

Mini Shai-Hulud - TanStack and more npm packages compromised, with SLSA Build Level 3 provenance attestations

Discussed on Lobsters
Feeds
Wiz Blog·

Mini Shai-Hulud Strikes Again: TanStack + more npm Packages Compromised

Feeds
snyk.io·

TanStack npm Packages Hit by Mini Shai-Hulud

Feeds
Blog (Main)·

Shai-Hulud code drop: It’s open season

Feeds
SentinelOne·

PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale

Feeds

Covered in 2 articles

thehackernews.com·

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

Feeds
therecord.media·

Red Hat removes tainted packages after software pipeline compromise

Discussed on Hacker News
Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help