<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[TanStack, a popular web UI framework has had its NPM packages compromised by another installment of Mini Shai-Hulud.]]></title><description><![CDATA[<p>TanStack, a popular web UI framework has had its NPM packages compromised by another installment of Mini Shai-Hulud.</p><p></p><div class="card col-md-9 col-lg-6 position-relative link-preview p-0">



<a href="https://discourse.ifin.network/t/mini-shai-hulud-strikes-again-tanstack-mistral-opensearch-npm-packages-compromised/428" title="Mini Shai-Hulud strikes again: TanStack, Mistral, OpenSearch npm packages compromised">
<img src="https://discourse.ifin.network/uploads/default/optimized/1X/ef189924c9edde6fe381a5acf3c15cf3f1dd033a_2_1024x576.jpeg" class="card-img-top not-responsive" style="max-height:15rem" alt="Link Preview Image" />
</a>



<div class="card-body">
<h5 class="card-title">
<a href="https://discourse.ifin.network/t/mini-shai-hulud-strikes-again-tanstack-mistral-opensearch-npm-packages-compromised/428">
Mini Shai-Hulud strikes again: TanStack, Mistral, OpenSearch npm packages compromised
</a>
</h5>
<p class="card-text line-clamp-3">Last Updated: 2026-05-12T17:22:17Z (UTC) 
What’s Happening
Around 170 NPM packages have been compromised by the same group executing other “Mini Shai-Hulud” attacks. The attack seems to have begun with TanStack, a popula…</p>
</div>
<a href="https://discourse.ifin.network/t/mini-shai-hulud-strikes-again-tanstack-mistral-opensearch-npm-packages-compromised/428" class="card-footer text-body-secondary small d-flex gap-2 align-items-center lh-2">



<img src="https://discourse.ifin.network/uploads/default/optimized/1X/ea367a05f4a0d090bf61d140dc84f744c9ab9bf0_2_32x32.png" alt="favicon" class="not-responsive overflow-hiddden" style="max-width:21px;max-height:21px" />





<p class="d-inline-block text-truncate mb-0">IFIN <span class="text-secondary">(discourse.ifin.network)</span></p>
</a>
</div><p></p><p><a href="https://infosec.exchange/tags/ThreatIntel" rel="tag">#<span>ThreatIntel</span></a> <a href="https://infosec.exchange/tags/ThreatIntelligence" rel="tag">#<span>ThreatIntelligence</span></a> <a href="https://infosec.exchange/tags/IFIN" rel="tag">#<span>IFIN</span></a></p>]]></description><link>https://board.circlewithadot.net/topic/46faa6d7-b1df-4c6e-bed2-57782ef38b3f/tanstack-a-popular-web-ui-framework-has-had-its-npm-packages-compromised-by-another-installment-of-mini-shai-hulud.</link><generator>RSS for Node</generator><lastBuildDate>Fri, 15 May 2026 00:35:40 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/46faa6d7-b1df-4c6e-bed2-57782ef38b3f.rss" rel="self" type="application/rss+xml"/><pubDate>Mon, 11 May 2026 23:27:32 GMT</pubDate><ttl>60</ttl></channel></rss>