TeamPCP's Mini Shai-Hulud is a self-propagating supply chain worm that has compromised over 170 npm and PyPI packages with 518M+ weekly downloads. The campaign's most significant achievement is defeating SLSA Build Level 3 provenance attestation by hijacking legitimate CI/CD pipelines rather than publishing from unauthorized accounts. CVE-2026-45321 describes the TanStack attack chain where a malicious pull request poisoned GitHub Actions cache, enabling OIDC token extraction from runner memory to publish 84 malicious package versions across 42 TanStack packages with valid Sigstore attestations. Confirmed victims include OpenAI, Mistral AI, the European Commission, and GitHub (3,800 internal repositories). The worm steals npm tokens, GitHub PATs, AWS credentials, Kubernetes secrets, and more, then uses them to publish poisoned versions of additional packages. TeamPCP has also open-sourced the worm code, spawning copycat attacks. Remediation steps include scanning dependency trees, removing persistence daemons before revoking tokens, rotating all credentials, hardening CI/CD configurations, and deploying --ignore-scripts for npm installs.
