Unknown
rss_bleepingcomputer
·
rss_a6001f4e5eace5badefd2d1e8ccf2ecb
Shai Hulud attack ships signed malicious TanStack, Mistral npm packages
Published May 12, 2026
Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering credential-stealing malware targeting developers. [...]
Affected AI Products
mistral