The TeamPCP threat group compromised over 170 npm and PyPI packages on May 11, including the entire TanStack Router ecosystem (42 packages), Mistral AI's SDK, and several other major package namespaces. Attackers exploited GitHub Actions' pull_request_target trigger to scrape short-lived OIDC tokens without stealing maintainer credentials directly, then injected the Mini Shai-Hulud malware to propagate across projects. The malware steals developer credentials including GitHub tokens, cloud credentials, API keys, Kubernetes service accounts, and SSH keys. It also installs a destructive 'dead man's switch' that attempts to delete the user's home directory if a stolen GitHub token is revoked. TeamPCP has been behind similar attacks on Bitwarden CLI and Aqua Security's Trivy scanner. Developers are advised to check lockfiles for compromised versions, pin dependencies, and rotate credentials if exposure is suspected.
