Socket on Mythryl: “🚨 Update: Four @opensearch.org Project npm versions are confirmed…”

🚨 Update: Four @opensearch.org Project npm versions are confirmed compromised as part of the ongoing Mini Shai-Hulud campaign: 3.5.3 3.6.2 3.7.0 3.8.0 This project sees 1.3M weekly downloads. We're continuing to track the campaign as it propagates across the npm ecosystem.

socket.devTanStack npm Packages Compromised in Ongoing Mini Shai-Hulud...Socket detected 84 compromised TanStack npm package artifacts modified with suspected CI credential-stealing malware.

12/5/26, 2:22 am2 reposts5 likes

Post