Aikido Security(@AikidoSecurity):Update 5:05 PT: The attack has now expanded well beyond @TanStack and @Mistral. 373 malicious package-version entries across 169 npm package names, including @uipath, @squawk, @tallyui, @beproduct, and more. The malware propagates by stealing your CI credentials and using them to publish new compromised versions. Full IOCs, affected package list, and detection steps:

Aikido Security

@AikidoSecurity

The best way to secure everything you build, ship & run. 🌐 ⭐️ Get developers back to building.

가입 September 2022

1.1K 팔로잉 중 10.8K 팬

Aikido Security@AikidoSecurity

2026.05.12 00:07

Update 5:05 PT: The attack has now expanded well beyond @TanStack and @Mistral. 373 malicious package-version entries across 169 npm package names, including @uipath, @squawk, @tallyui, @beproduct, and more. The malware propagates by stealing your CI credentials and using them to publish new compromised versions. Full IOCs, affected package list, and detection steps:

2.6K

494

커뮤니티로 전달

인기 있는 사용자