#hulud


Shai Hulud attack ships signed malicious TanStack, Mistral npm packages

May 12, 2026 // 14:36

Hundreds of packages across npm, PyPI, and Composer have been compromised in a new Shai-Hulud supply-chain campaign delivering credential-stealing malware targeting developers. The attacker hijacked […]