Post #2965865
2026-05-12 20:15 UTC
🚨 UPDATE: Mini Shai-Hulud has crossed from #NPM into #ComposerPHP/#Packagist and now #PyPI… and is still spreading.
mistralai@2.4.6
guardrails-ai@0.10.1
https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack
#TeamPCP #SupplyChainAttack
Replies (1)
-
@loicfaugeron@phpc.social 2026-05-13 08:36
@ghostwriter@phpc.social I didn't know it reached composer. thanks for spreading the word!