Mini ShaiHulud Worm Compromises TanStack Mistral AI Guardrails AI More Packages

TeamPCP the threat actor behind the recentsupply chain attack spree has been linked to the compromise of the npm and PyPI packages from TanStack UiPath Mistral AI OpenSearch and Guardrails AI as part of a fresh Mini ShaiHulud campaign The affected npm packages have been modified to include an obfuscated JavaScript file routerinitjs thats designed to profile the execution