Compromised Mistral and TanStack packages may have exposed GitHub, cloud and CI/CD credentials in 'mini Shai Hulud' malware infection — supply-chain campaign spreads across npm developer ecosystems like wildfire
Shai Hulud attack ships signed malicious TanStack, Mistral npm packages
