TechiSeek

AddAdd your Listings

Blogs

TanStack npm Packages Hit by Mini Shai-Hulud

Snyk

On May 11, 2026, the Mini Shai-Hulud worm compromised 84 npm package artifacts across 42 @tanstack/* packages (as well as @squawk/*, @mistralai/* packages, and others) by chaining a GitHub Actions "Pwn Request," cache poisoning, and OIDC token extraction from runner memory — producing the first npm supply chain attack with valid SLSA Build Level 3 attestations.

Visit Site

What is a Container Registry security?Snyk 10 best practices to containerize Node.js web applications with DockerSnyk How to verify and secure your Mastodon accountSnyk Vulnerability assessmentSnyk Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security IncidentSnyk Using Snyk reporting for data-driven securitySnyk Godoc: documenting Go code - The Go Programming LanguageGo Go.dev: a new hub for Go developers - The Go Programming LanguageGo Managing dependencies - The Go Programming LanguageGo Understanding Redis Enterprise Software Support PackagesRedis Introducing Dependency Divergence GitHub ActionSocket Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket upm Launches as a Fast, Tiny Package Manager Written in TypeScriptSocket Happy Birthday, Shai-HuludSocket NEXTJS_MISSING_MODULARIZE_IMPORTSVercel How to Protect Your Projects from the Risks of Deprecated npm PackagesSocket When "Everything" Becomes Too Much: The npm Package Chaos of 2024Socket Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain AttackSocket Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-HuludSocket Cleaning up import paths in JS/TS packagesSocket