Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack

Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack Mini Shai-Hulud is back. Like I said before, we were yet to see the full scale of the attack. The npm campaign we covered in April, when it targeted SAP packages, has now turned into a much larger compromise. Our Malware T

[nguyen-oi]

npmのエコシステム、サプライチェーン攻撃で燃えるの恒例行事すぎる。信頼済みパブリッシングの穴を突くとか悪意の塊だな

[gabill]

これきっかけで他のライブラリも乗っ取られたりするだろうし、影響はこんなもんじゃないかもしれない