How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Shai-Hulud Part 2: When the Worm Forged Its Own Security Certificate by Lucie Cardiet

calendar_today May 13, 2026 person domain vectra-ai

TeamPCP open-sourced Shai-Hulud today. The OIDC token extraction technique that made the TanStack attack different from every previous campaign is now a public toolkit.

open_in_new Read original post