Security NewsHighIncidentsupply chain
Shai Hulud attack ships signed malicious TanStack, Mistral npm packages
UnknownMay 12, 2026(about 2 hours ago)
A supply-chain attack named Shai-Hulud compromised npm and PyPI packages, delivering credential-stealing malware targeting developers.
Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering credential-stealing malware targeting developers. [...]