Mini Shai-Hulud Compromises TanStack npm Packages and Spreads to PyPI (infosecurity-magazine.com)

• TanStack npm packages compromised in supply chain attack
• Malware spreads from npm to PyPI repositories
• Attack named Mini Shai-Hulud exploits open-source dependencies

"A supply chain attack dubbed 'Mini Shai-Hulud' has compromised TanStack npm packages and subsequently spread to the Python Package Index (PyPI). The attack targets open-source dependencies, indicating a broad campaign against the software supply chain."