2 days, 11 hours ago   hackread.com

TeamPCP Claims Sale of Mistral AI Repositories Amid Mini Shai-Hulud Attack

Only days after the Mini Shai-Hulud supply chain attack targeted npm and PyPI packages associated ...

2 days, 21 hours ago   hackread.com

TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages

Research reveals that TeamPCP hijacked OIDC tokens to poison hundreds of TanStack, Mistral AI, and ...

4 days ago   theregister.co.uk

Cache-poisoning caper turns TanStack npm packages toxic

An attacker has published 84 malicious versions of official TanStack npm packages, with the impact ...