Major Malware Attack Hits 170+ Open-Source Software Packages

Massive cyberattack "mini Shai-Hulud" targets popular open-source packages, stealing cloud credentials and exposing software vulnerabilities.

By Content Team

May 13, 2026

ON THIS PAGE

A supply chain campaign called "mini Shai-Hulud" poisoned around 170 open-source packages on May 11 and 12, including TanStack's react-router, which has over 12 million weekly downloads. UiPath, Mistral AI and Guardrails AI packages were hit too, and this is not the first wave — earlier ones reached Trivy, Bitwarden and Checkmarx.

Two-factor authentication never came into it. The attackers poisoned a GitHub Actions cache and lifted an OIDC token out of the runner's memory to mint a valid npm publish token. The malicious releases then carried genuine provenance attestations, so they showed verified badges pointing at an attacker-controlled build.

The malware writes itself into Visual Studio Code and Claude Code config directories, so it outlives uninstalling the package, and it disguises stolen data as anonymous messaging traffic through the Session app.

TanStack tells anyone who installed an affected version to change every connected cloud, server and developer credential. Do it in the right order: Wiz warns that the malware's gh-token-monitor daemon must be removed first, because revoking tokens while it is still running triggers destructive wiping. Then clear out .vscode and .claude, and block git-tanstack.com.

Source: CyberScoop

Have questions about protecting your software?

Our escrow experts are standing by to help.

Book a free demo

Want more insights like this?