Storia in 5 fonti

Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps

TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious versions anyway. The CI/CD Trust-Chain Audit Grid maps the six gaps it exploited and the Monday-morning fix for each one.

Raccontata da

Confronto fonti

5 prospettive sulla stessa storia

AI · summaries

venturebeat.comStai leggendo1 mesi fa

Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps

originale

Timeline cronologica

lunedì 11 maggio 2026·theregister.com
Checkmarx tackles another TeamPCP intrusion as Jenkins plugin sabotaged
Cybercrooks ruin engineers' weekends with Saturday attack
martedì 12 maggio 2026·thehackernews.com
Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm packages.

Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps

Confronto fonti

Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps

Timeline cronologica

Checkmarx tackles another TeamPCP intrusion as Jenkins plugin sabotaged

Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages

Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages

Shai Hulud attack ships signed malicious TanStack, Mistral npm packages

Cache-poisoning caper turns TanStack npm packages toxic

Mistral AI SDK, TanStack Router hit in npm software supply chain attack

Cache-poisoning caper turns TanStack npm packages toxic

Shai Hulud attack ships signed malicious TanStack, Mistral npm packages

Mistral AI SDK, TanStack Router hit in npm software supply chain attack

Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps

Malware crew TeamPCP open-sources its Shai-Hulud worm on GitHub

OpenAI caught in TanStack npm supply chain chaos after employee devices compromised