Skip to content
AI News HubLIVE
More
Summary only

Mass NPM Supply Chain Attack Hits TanStack, Mistral AI, and 170 Packages

On May 12, 2026, SafeDep disclosed a supply chain attack targeting npm and PyPI ecosystems, affecting over 170 packages including TanStack and Mistral AI. Attackers tampered with build scripts, added malicious downloaders, and used the Session protocol to exfiltrate credentials. The payload also includes IDE and AI agent poisoning mechanisms that self-replicate and commit malicious configuration files to victim repositories, creating a persistent infection loop.

SourceHacker News AIAuthor: birdculture
Mass NPM Supply Chain Attack Hits TanStack, Mistral AI, and 170 Packages
Report an error

The correction channel is not available yet. You can copy the article reference below for later.

Correction instructions

Summary only

Under the source content permission, this page provides an editorial summary, key points, and a link to the original article.

Key points and analysis

Article intelligence

EngineersIntermediate

Key points

  • Attack compromised over 170 packages including TanStack and Mistral AI by altering package.json and adding malicious scripts.
  • Malicious payload uses AES encryption and Bun runtime, with a modular credential stealing framework targeting AWS, HashiCorp Vault, GitHub tokens, etc.
  • Exfiltration via Session protocol and Oxen network enables dynamic routing, making it hard to block via fixed domains.
  • Attackers leverage IDE configurations and GitHub GraphQL API to auto-commit malicious files to branches, infecting developers who pull the code.

Highlights and analysis are generated automatically and may contain errors. Check the original source.

More recent stories on this topic · Models