Hackers have compromised dozens of popular open source packages in an ongoing supply chain attack | TechCrunch

The attacks are part of a wider campaign known as Mini Shai-Hulud, which has already compromised several open source projects and, in turn, developers and companies that use them.

martedì 19 maggio 2026 New tab

238 words~1 min read

In Brief

Posted:

8:32 AM PDT · May 19, 2026

Image Credits:fotograzia / Getty Images

Hackers have compromised several popular open source projects relied on by software developers all over the world in an ongoing cyberattack.

Hackers have compromised dozens of popular open source packages in an ongoing supply chain attack | TechCrunch

Hackers have compromised dozens of popular open source packages in an ongoing supply chain attack | TechCrunch

Other newsrooms on this story

Related reading

Ongoing supply chain attacks worm into SAP npm packages

Supply Chain Attack Hits 32 Red Hat NPM Packages

Over 320 NPM Packages Hit by Fresh Mini Shai-Hulud Supply Chain Attack

A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale

Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks

Checkmarx tackles another TeamPCP intrusion as Jenkins plugin sabotaged

Related reading

Ongoing supply chain attacks worm into SAP npm packages

Supply Chain Attack Hits 32 Red Hat NPM Packages

Over 320 NPM Packages Hit by Fresh Mini Shai-Hulud Supply Chain Attack

A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale

Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks

Checkmarx tackles another TeamPCP intrusion as Jenkins plugin sabotaged

Other newsrooms on this story