Skip to content
Threat Feed

Vendor

UiPath

1 brief RSS
high threat

Mini Shai-Hulud Campaign Compromises npm Packages

The Mini Shai-Hulud supply chain campaign, attributed to TeamPCP, has compromised several npm packages, including those within the @tanstack, @uipath, and @mistralai namespaces, leading to credential theft and potential further compromise.

@tanstack/react-router +2 TeamPCP supply-chain npm malware
3r 6t 8i