New ‘Shai-Hulud’ attack breached hundreds of npm and PyPI packages

A rapidly expanding supply-chain attack tied to the “Mini Shai-Hulud” malware campaign has compromised more than 400 package artifacts across npm, PyPI, and Composer repositories. The breached projects include widely used libraries from TanStack, Mistral AI, UiPath, OpenSearch, and Guardrails AI. Security researchers at Socket, Endor Labs, and Aikido say the malware steals credentials from … The post New ‘Shai-Hulud’ attack breached hundreds of npm and PyPI packages appeared first on CyberInsider.