Mini Shai-Hulud Is Back: NPM Worm Hits over 160 Packages, Including Mistral
The Mini Shai-Hulud npm worm campaign has expanded dramatically, now affecting 373 malicious package-version entries across 169 package names including TanStack and Mistral. The malware steals credentials from developer machines and CI/CD runners, and uses trusted publishing paths to propagate.
Mini Shai-Hulud Is Back: NPM Worm Hits over 160 Packages, Including Mistral
Report an error
The correction channel is not available yet. You can copy the article reference below for later.
Correction instructionsSummary only
Under the source content permission, this page provides an editorial summary, key points, and a link to the original article.