‘Mini Shai-Hulud’ Supply-Chain Attack Targets AntV Ecosystem and Claude Code

TeamPCP used the Mini Shai-Hulud worm to launch a software supply-chain attack targeting the widely used NPM and PyPI package ecosystems. Victims include Mistral AI, TanStack and Guardrails AI. The malware can spread when packages are installed, exposing downstream projects and corporate systems to the theft of code, credentials and internal data.

Cybersecurity companies have described the incident as the largest code-repository attack of 2026 so far. TeamPCP has infiltrated more than 400 NPM and PyPI packages and is offering nearly 450 Mistral AI code repositories for sale. The latest investigation shows that the attack has spread further to GitHub, exposing nearly 3,800 internal repositories as its reach continues to expand.

SAP’s NPM packages sit within the enterprise software development supply chain, meaning malware inserted into the publishing process or dependencies could spread through the installation chain into development environments. The Mini Shai-Hulud attack involved hacker group TeamPCP, which sought to steal cloud account credentials and development credentials while using trusted packages to conceal the intrusion.

Cybersecurity companies recently disclosed that TeamPCP planted malicious scripts in NPM packages within the SAP ecosystem and abused Anthropic’s Claude Code hooks to automatically commit malicious content to victims’ code repositories. As of July 20, 2026, reports had not disclosed the number of affected organizations, financial losses, the exact discovery date or the versions of the affected packages.