1 day, 7 hours ago   theregister.co.uk

Cache-poisoning caper turns TanStack npm packages toxic

An attacker has published 84 malicious versions of official TanStack npm packages, with the impact ...

3 hours ago   bankinfosecurity

Mass Supply-Chain Attack Slams npm and PyPi, Hits Mistral AI

Latest Mini Shai-Hulud Worm Steals Credentials, Includes Wiper, Now Open Source Mathew J. Schwartz (euroinfosec) ...

4 hours ago   hackread.com

TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages

Research reveals that TeamPCP hijacked OIDC tokens to poison hundreds of TanStack, Mistral AI, and ...