Diamond Member ThaHaka 0 Posted 4 hours ago Diamond Member Share Posted 4 hours ago This is the hidden content, please Sign In or Sign Up TeamPCP, the threat actor behind the recent supply chain attack spree, has been linked to the compromise of the npm and PyPI packages from TanStack, UiPath, Mistral AI, OpenSearch, and Guardrails AI as part of a fresh Mini Shai-Hulud campaign. The affected npm packages have been modified to include an obfuscated JavaScript file ("router_init.js") that's designed to profile the execution This is the hidden content, please Sign In or Sign Up 0 Quote Link to comment https://hopzone.eu/forums/topic/312773-h4ckn3wsmini-shai-hulud-worm-compromises-tanstack-mistral-ai-guardrails-ai-more-packages/ Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.