Security News Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages TheHackerNews Daniel Bender 12 May 2026 Share TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm packages.
