How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →

Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack

calendar_today May 11, 2026 domain aikido-security

Mini Shai-Hulud is back, compromising 169 npm packages across TanStack, UiPath, Squawk, and more to steal developer and CI/CD secrets, then spread through trusted publishing workflows. Category: Vulnerabilities & Threats

open_in_new Read original post

Discovery

Learnings

Guidance

Toolbox

Alignment

API Evangelist LLC

Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack