Mini Shai-Hulud npm Worm Hit 170+ Packages Including Mistral AI — And It Wipes Your Drive If You Revoke the Token
TeamPCP’s Mini Shai-Hulud worm compromised 170+ npm and PyPI packages including TanStack, Mistral AI, and UiPath in just 6 minutes — stealing credentials, self-propagating, and wiping drives if you revoke the stolen tokens.