Cybersecurity · 7 views

Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages

TeamPCP, the threat actor behind the recent supply chain attack spree, has been linked to the compromise of the npm and PyPI packages fro…

Source The Hacker News AI Summary Updated May 12, 2026

Story intelligence Beta

Freshness Stale Updated May 12, 2026

Confidence Limited Single-outlet story

Coverage Single outlet

Views 7 Community interest

Read time 1 min ~60 words

AI Summary

TeamPCP, the threat actor behind the recent supply chain attack spree, has been linked to the compromise of the npm and PyPI packages from TanStack, UiPath, Mistral AI, OpenSearch, and Guardrails AI as part of a fresh Mini Shai-Hulud campaign. The affected npm packages have been modified to include an obfuscated JavaScript file ("router_init.js") that's designed to profile the execution

Read full article on The Hackernews

AI summaries can be wrong sometimes—always verify important details using the source article.