Back to article

Mini Shai-Hulud Strikes Again: TanStack + more npm Packages Compromised (opens in new tab)

Covered by 8 sources including This Week In 4n6, DEV Community

Covered in 8 articles

This Week In 4n6·

Week 20

DEV Community·

This Week In React #281 : Next.js, TanStack, Security, Redact | Redraw, Expo, Tabs, Screens

Discussed on DEV

TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages

venturebeat.com·

Four AI supply-chain attacks in 50 days exposed the release pipeline red teams aren't covering

Mini Shai-Hulud: Frequently asked questions about the TeamPCP npm and PyPI supply chain campaign

Atlantic Council·

New AI models are pushing open-source security to its limits. Their developers must step up.

IT Security Weekend Catch Up

Shai-Hulud's Source Code Leaked, Break Into Buildings for $, Reversing EDRs with AI