Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
criticalnews
security
Source: The Hacker NewsMay 12, 2026
Summary
TeamPCP compromised multiple popular software packages (from companies like TanStack, Mistral AI, and Guardrails AI) by injecting malicious code that steals credentials for cloud services, cryptocurrency wallets, and development tools. The attack used a technique called SLSA provenance (a system that verifies software was built securely) to make the malicious packages look legitimate, and the malware persists by modifying development tools like VS Code so it runs every time the tool starts.
Classification
Attack Type
Supply Chain
Attack SophisticationAdvanced
Impact (CIA+S)
confidentialityintegrity
Affected Vendors
MistralHuggingFace
Related Issues
Monthly digest — independent AI security research
Original source: https://thehackernews.com/2026/05/mini-shai-hulud-worm-compromises.html
First tracked: May 12, 2026 at 08:00 AM
Classified by LLM (prompt v3) · confidence: 92%