---
id: 2438
title: "Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack"
source_domain: aikido.dev
source_url: "https://www.aikido.dev/blog/mini-shai-hulud-is-back-tanstack-compromised"
published_at: "2026-05-12 00:00"
tags: ["ai-security", "supply-chain", "malware", "credential-theft", "npm", "ci-cd", "supply-chain-security", "worm", "shai-hulud"]
phying_url: "https://phying.com/item/2438"
lang: en
---

# Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack

## Summary

The npm worm Mini Shai-Hulud has grown to 373 malicious versions across 169 packages, including TanStack and Mistral AI, stealing developer credentials and spreading through trusted publishing paths.

## Intelligence Metadata

- **Sources:** aikido.dev
- **Published:** 2026-05-12 00:00
- **Original:** https://www.aikido.dev/blog/mini-shai-hulud-is-back-tanstack-compromised
- **Phying News:** https://phying.com/item/2438