Worm Redux: Fresh Mini Shai-Hulud Infections Bite Supply Chain
A self-propagating worm from TeamPCP has infected hundreds of npm packages related to the TanStack ecosystem, stealing credentials. This matters because it affects the open source supply chain. Engineers should be cautious when using these packages and consider updating or replacing them.