Post

🚨 UPDATE: Mini Shai-Hulud has crossed from @npmjs.bsky.social into @pypi.org and is still spreading. Newly confirmed compromised artifacts: @opensearch-project/opensearch: 3.5.3, 3.6.2, 3.7.0, 3.8.0 (1.3M weekly downloads) mistralai: 2.4.6 on PyPI guardrails-ai: 0.10.1 on PyPI

Socket

@socket.dev

guardrails-ai 0.10.1 runs malicious code on import. On Linux, it downloads git-tanstack[.]com/transformers.pyz to /tmp and runs it with python3. The domain displayed: “We’ve been online over 2 hours now stealing creds Regardless I just came to say hello :^) With Love TeamPCP"

12/5/26, 5:23 am0 reposts7 likes

Socket

@socket.dev

12 May

We’ll continue to update as the attack spreads. More details and a total of 416 malicious artifacts (so far) can be found here: socket.dev/blog/tanstac...

socket.devTanStack npm Packages Compromised in Ongoing Mini Shai-Hulud...Socket detected 84 compromised TanStack npm package artifacts modified with suspected CI credential-stealing malware.