Mini Shai-Hulud

The Latest

Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages

Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages

Airlock Digital Unveils Agentic AI Control & Governance to Extend Preventative Endpoint Security

Mallory Unifies Threat Intelligence, Exposure Context, and Response Into One Architecture for Security Teams

2026 Cybersecurity Excellence Awards: Community Choice Winners Selected Through 80,000 Votes

TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages

Read More

4 minute read

TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages

Research reveals that TeamPCP hijacked OIDC tokens to poison hundreds of TanStack, Mistral AI, and UiPath packages with the self-propagating Mini Shai-Hulud worm.

May 13, 2026