Supply‑chain malware campaign infects npm and PyPI packages, steals credentials from OpenAI and Mistral AI

A coordinated supply‑chain attack, dubbed “Mini Shai‑Hulud,” has compromised more than 300 npm and PyPI packages, injecting malicious post‑install scripts that harvest AWS, GitHub, SSH keys and other cloud credentials. The campaign gained control of maintainer accounts, publishing altered versions of popular libraries that automatically execute the payload on installation.

The breach has been confirmed to affect major AI developers, with OpenAI reporting internal devices compromised and Mistral AI losing access to hundreds of repositories. The malicious code spreads through trusted dependencies used in thousands of applications, magnifying the potential impact across the software ecosystem.

A separate but related operation by the known threat group TeamPCP has also poisoned numerous GitHub repositories, further exposing thousands of applications to the same credential‑theft tactics. Experts advise immediate rotation of all secrets, deep audits of lockfiles, and disabling of install‑time scripts in sensitive environments, alongside the use of advanced behavior‑analysis tools to detect novel threats.