Shai Hulud attack ships signed malicious TanStack, Mistral npm packages

A supply‑chain campaign named Shai‑Hulud, attributed to TeamPCP, has compromised hundreds of npm and PyPI packages (including TanStack and Mistral AI) by stealing CI/OIDC credentials and publishing malicious package versions signed with valid SLSA attestations; the delivered payload is a credential‑stealing infostealer that persists in developer IDEs, exfiltrates secrets over a P2P network, and includes destructive/geofenced behavior, prompting wide credential rotation, audits for persistence, and blocking of known C2 infrastructure.