Read More 4 minute read Security Malware TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages Research reveals that TeamPCP hijacked OIDC tokens to poison hundreds of TanStack, Mistral AI, and UiPath packages with the self-propagating Mini Shai-Hulud worm. byDeeba AhmedMay 13, 2026