Compromised Mistral AI and TanStack packages may have exposed GitHub, cloud and CI/CD credentials in 'mini Shai Hulud' malware infection — ...
tomshardware.com/tech-industry/cyber-security/compromised-mistral-ai-and-tanstack-packages-may-have-exposed-github-cloud-and-ci-cd-credentials-in-mini-shai-hulud-malware-infection-supply-chain-campaign-spreads-across-npm-and-ai-developer-
Story Details
| Last Updated | |
| Total Articles | 4 |
Main Topics
community of living organisms together with the nonliving components of their environment, interacting as a system
News on this topic
Shai Hulud attack ships signed malicious TanStack, Mistral npm packages: A large-scale software supply-chain attack involving the "Shai-Hulud" malware ...
bleepingcomputer.com/news/security/shai-hulud-attack-ships-signed-malicious-tanstack-mistral-npm-packages/
Similar to This
Previous
dlvr.it Aug 15
ChainDrop worm crawls into npm supply chain, evades standard defenses: Shai-Hulud variant poisons 444 packages, spreads via tarballs and dev-tool hooks
theregister.com/security/2026/08/15/chaindrop-worm-crawls-into-npm-supply-chain-evades-standard-defenses/5287958
CyberNews Aug 05
Massive NPM supply chain attack is yet again ravaging hundreds of software packages
cybernews.com/security/npm-supply-chain-attack-shai-hulud-worm/
dlvr.it Jun 10
GitHub pulls pin on npm's auto-run scripts: Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors
theregister.com/devops/2026/06/10/github-pulls-pin-on-npms-auto-run-scripts/5253453
Red Hat npm packages compromised to steal developer credentials: More than 30 npm packages under Red Hat's '@redhat-cloud-services' namespace were ...
bleepingcomputer.com/news/security/red-hat-npm-packages-compromised-to-steal-developer-credentials/
Dozens of Red Hat packages backdoored through its official NPM channel: Anyone who has downloaded affected Red Hat packages should investigate immediately.
arstechnica.com/security/2026/06/dozens-of-red-hat-packages-backdoored-through-its-offical-npm-channel/
Worm in the NPM ecosystem: Several Red Hat software packages compromised - | Golem.de
golem.de/news/wurm-im-npm-oekosystem-mehrere-softwarepakete-von-red-hat-kompromittiert-2606-209295.html
dlvr.it May 19
Shai-Hulud keeps burrowing: 314 npm packages infected after another account compromise
theregister.com/cyber-crime/2026/05/19/shai-hulud-keeps-burrowing-314-npm-packages-infected-after-another-account-compromise/5242601
dlvr.it May 15
OpenAI caught in TanStack npm supply chain chaos after employee devices compromised
theregister.com/security/2026/05/15/openai-caught-in-tanstack-npm-supply-chain-chaos-after-employee-devices-compromised/5241019
Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps
venturebeat.com/security/shai-hulud-worm-172-npm-pypi-packages-valid-provenance-ci-cd-audit
dlvr.it May 12
Cache-poisoning caper turns TanStack npm packages toxic: Six-minute supply chain blitz pushed 84 malicious versions with credential theft and disk-wiping code
theregister.com/cyber-crime/2026/05/12/cache-poisoning-caper-turns-tanstack-npm-packages-toxic/5238650
Supply chain attack: Hundreds of NPM and PyPI packages compromised - | Golem.de: The hacker group TeamPCP is once again digging through countless NPM and Python ...
golem.de/news/supply-chain-angriff-hunderte-von-npm-und-pypi-paketen-kompromittiert-2605-208562.html
Shai-Hulud 2.0 NPM malware attack exposed up to 400,000 dev secrets: The second Shai-Hulud attack last week exposed around 400,000 raw secrets after infecting ...
bleepingcomputer.com/news/security/shai-hulud-20-npm-malware-attack-exposed-up-to-400-000-dev-secrets/
Shai-Hulud 2: New version of the NPM worm also attacks low-code platforms: The attackers have learned from their mistakes and have now developed a more ...
heise.de/news/Shai-Hulud-2-Neue-Version-des-NPM-Wurms-greift-auch-Low-Code-Plattformen-an-11089607.html
New NPM supply-chain attack compromises major ENS and crypto libraries: A researcher reported that more than 400 NPM libraries, including a cluster of ENS-linked ...
cointelegraph.com/news/new-npm-supply-chain-attack-compromises-major-ens-and-crypto-libraries
CrowdStrike Infested With "Self-Replicating Worms": The vendor was one of a many whose code modules were infected by a never before seen strand of malware known ...
futurism.com/crowdstrike-infested-self-replicating-worms
CrowdStrike Infested With "Self-Replicating Worms": The vendor was one of a many whose code modules were infected by a never before seen strand of malware known ...
futurism.com/crowdstrike-infested-self-replicating-worms
Next