Mini Shai-Hulud Worm Compromises Tan Stack, Mistral AI, Guardrails AI & More Packages

Summary: TeamPCP has been linked to compromises of npm and PyPI packages from TanStack, UiPath, Mistral AI, OpenSearch, and Guardrails AI in a Mini Shai-Hulud campaign, with the TanStack incident assigned CVE-2026-45321 at a CVSS score of 9.6 and affecting 42 packages and 84 versions. The malware uses an obfuscated JavaScript file to steal credentials from cloud providers, crypto wallets, AI tools, messaging apps, and CI systems, exfiltrating data to a Session Protocol domain and, as a fallback, to attacker-controlled GitHub repositories.
What you should know: The compromised packages carry valid SLSA Build Level 3 provenance attestations, making this the first documented npm worm that produces validly attested malicious packages, and OX Security counts over 170 affected packages with more than 518 million cumulative downloads. The malware also installs a dead-man's switch that runs rm -rf ~/ if its npm token is revoked, so revoking tokens before isolating and imaging an infected system can wipe the machine.

Read the original at The Hacker News ↗

Topics: Supply Chain & AppSec
Mentions: CVE-2026-45321
Related: Crowd Sec Says Tan Stack npm Attack Led to Copy of 170 Private GitHub Repositories Cyber Risks ·
CVE-2026-45321: Tan Stack Unspecified Vulnerability Known Exploited Vulnerabilities · May 27, 2026
Kitesurf is now open source Cyber Risks · Nov 13, 2026