New Worm Attack Hits TanStack, Mistral AI, and More

Robert Moore · 2026-05-12

A fresh wave of supply chain attacks is making waves in the tech world, and it's one you need to know about. The threat actor known as TeamPCP has been linked to a new campaign called Mini Shai-Hulud, which recently compromised popular npm and PyPI packages from major names like TanStack, UiPath, Mistral AI, OpenSearch, and Guardrails AI. If you're using any of these tools, it's time to pay attention. These attacks aren't just random—they're part of a growing trend where bad actors sneak malicious code into software packages that developers trust. The goal? To profile your system and potentially steal sensitive data. Let's break down what happened, why it matters, and how you can protect yourself. ### What Exactly Happened? TeamPCP modified several npm packages to include a hidden, obfuscated JavaScript file called "router_init.js." This file is designed to quietly profile the execution environment—meaning it checks things like your operating system, browser settings, and other system details. Think of it as a digital scout that gathers intel before launching a bigger attack. The packages affected come from well-known companies and projects: - TanStack (a popular React framework) - UiPath (automation software) - Mistral AI (AI tools) - OpenSearch (search and analytics) - Guardrails AI (AI safety tools) This isn't the first time we've seen this kind of attack. Supply chain attacks have been on the rise for years, with high-profile incidents like the SolarWinds hack showing just how damaging they can be. But this one feels different because it targets tools that smaller teams and individual developers rely on daily.  ### Why Should You Care? If you're a developer or a business using these packages, this attack could put your entire system at risk. The malicious code doesn't just sit there—it actively profiles your environment, which could lead to data theft, credential compromise, or even full-scale system takeover. Here's a quick list of what makes this attack particularly dangerous: - It's stealthy: The code is obfuscated, making it hard to detect with standard security tools. - It's targeted: By profiling your system, the attackers can tailor their next moves. - It's widespread: Multiple packages were hit, meaning the reach is broad. > "The best defense against supply chain attacks is a proactive approach to security." — Robert Moore, Lead Antidetect Browser Specialist  ### How to Protect Yourself So, what can you do? First, check if you're using any of the affected packages. If you are, update them immediately to the latest patched versions. Most maintainers have already pushed fixes, so a simple `npm update` or `pip install --upgrade` should do the trick. But beyond that, consider these steps: - Use a package lock file to freeze dependency versions. - Monitor your dependencies with tools like Snyk or Dependabot. - Run security scans on your codebase regularly. - For high-risk environments, consider using an antidetect browser to mask your digital footprint. This can help prevent profiling attacks like the one seen here. ### The Bigger Picture This attack is a reminder that no tool is 100% safe—not even the ones you trust. The supply chain is a weak link that attackers love to exploit, and it's only getting more complex as we rely on more third-party code. TeamPCP's Mini Shai-Hulud campaign is just the latest example. By staying informed, updating your tools, and using smart security practices, you can reduce your risk. And if you're in a sensitive field—like finance, healthcare, or government—consider investing in an antidetect browser to add an extra layer of privacy. In the end, security isn't a one-time fix; it's an ongoing habit. Stay sharp, keep your software updated, and never underestimate what a single malicious package can do.