Vulnerabilities · 116 days ago
Provenance checks no longer close the trust gap in npm and PyPI. TeamPCP’s Mini Shai-Hulud worm has shown that a package can carry valid SLSA Build Level 3 attestations and still be part of a credential-stealing supply-chain campaign that turns CI/CD systems into distribution nodes.
Tenable says the campaign has compromised more than 170 npm and PyPI packages and breached OpenAI and Mistral AI. The issue is tracked as CVE-2026-45321. The key failure is not just malicious packages, but compromised publishing pipelines that can keep spreading poisoned releases under trusted identities.
That shifts the threat model from bad dependencies to trusted build infrastructure. Any system that installed one of the poisoned packages may need to be treated as fully compromised, because the worm steals developer and cloud credentials and reuses them to seed the next wave.
Known exploited · CISA KEV
CVSS 9.6 CRITICAL: on 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. EPSS 2% (81st percentile).
CISA federal remediation date Jun 10
17 sources covering this story
Mini Shai-Hulud Supply Chain Attack CVE-2026-45321 FAQ | Tenable®
Mini Shai-Hulud is a self-spreading supply chain worm targeting npm and PyPI.
Compromised @antv npm packages deploy the Mini Shai-Hulud payload to steal CI/CD secrets from Linux-based automation environments.
GitHub says internal repos exfiltrated after poisoned VS Code extension attack
Initial assessment says customer data spared while users wonder what else may have slipped out
GitHub Confirms Breach, 4K Internal Repos Stolen
GitHub confirmed a data breach this week involving the theft of thousands of developer code repositories. One threat actor — TeamPCP — took credit.
GitHub says internal repositories were impacted in poisoned VS Code extension attack
GitHub confirms a breach affecting roughly 3,800 internal repositories after an employee device was compromised by a poisoned VS Code extension.
Compromised coding tool helped hackers breach thousands of GitHub repositories
The attack is the latest example of hackers’ intense focus on open-source packages.
GitHub says hackers stole data from thousands of internal repositories | TechCrunch
The code hosting giant GitHub said it was investigating a breach but said there was no evidence of customer data theft.
The Record from Recorded Future
GitHub confirms being hacked by TeamPCP, says customer data unaffected
Github, which hosts code for more than 100 million developers worldwide, confirmed the breach on social media after TeamPCP advertised stolen source code on a cybercrime forum.
Over 320 NPM Packages Hit by Fresh Mini Shai-Hulud Supply Chain Attack
A compromised maintainer account was used to publish malicious package versions across the @antv namespace.
GitHub Confirms Breach of Internal Repositories
The prolific threat group TeamPCP has claimed a hack into GitHub’s internal repositories
TeamPCP breached GitHub's internal codebase via poisoned VS Code extension - Help Net Security
GitHub confirmed that attackers breached its private code repositories after an employee installed a malicious VS Code extension.
GitHub Confirms Hack Impacting 3,800 Internal Repositories
The TeamPCP hacking group accessed the repositories after a GitHub employee installed a poisoned VS Code extension.
Part of the PlainSec briefing for 2026-05-18