Skip to content
Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack
aikido.dev | blog | #ai-security | #supply-chain | #malware | #credential-theft | #npm | #ci-cd | #supply-chain-security | #worm | #shai-hulud
Summary
The npm worm Mini Shai-Hulud has grown to 373 malicious versions across 169 packages, including TanStack and Mistral AI, stealing developer credentials and spreading through trusted publishing paths.
- Published
- Collected