Security & Risknpm securitysupply chainwormoidc tokens
Hackers Hijack 169 Popular npm Packages
|
7.2
A Mini Shai-Hulud worm compromises 169 npm packages, including TanStack Mistral AI. The campaign hijacks popular developer packages and compromises projects that depend on them. Threat actor TeamPCP uses stolen OIDC tokens in the operation.
Scoring Rationale
Large-scale supply-chain compromise affecting 169 widely used packages, including an AI package, and involving stolen OIDC tokens; significant risk to developer ecosystems.
Practice interview problems based on real data
1,500+ SQL & Python problems across 15 industry datasets — the exact type of data you work with.
Try 250 free problems
