TeamPCP Uses Mini Shai-Hulud Worm to Infiltrate More Than 400 NPM and PyPI Packages
TeamPCP used the Mini Shai-Hulud worm to launch a software supply-chain attack targeting the widely used NPM and PyPI package ecosystems. Victims include Mistral AI, TanStack and Guardrails AI. The malware can spread when packages are installed, exposing downstream projects and corporate systems to the theft of code, credentials and internal data.
Cybersecurity companies have described the incident as the largest code-repository attack of 2026 so far. TeamPCP has infiltrated more than 400 NPM and PyPI packages and is offering nearly 450 Mistral AI code repositories for sale. The latest investigation shows that the attack has spread further to GitHub, exposing nearly 3,800 internal repositories as its reach continues to expand.
All Coverage
3 original reportsThe Backstory
The history behind this event‘Mini Shai-Hulud’ Supply-Chain Attack Targets AntV Ecosystem and Claude Code
“Mini Shai-Hulud” is a supply-chain attack targeting the distribution pipeline for open-source packages. The TeamPCP hacking group compromised Alibaba-owned data visualization library AntV to spread malware into developer environments. With the affected ecosystem recording 1.5 million downloads a week, the threat can propagate through project dependencies and expose cloud accounts, cryptocurrency assets and corporate source code.
The latest investigation found that TeamPCP had published more than 600 malicious packages designed to steal cloud-service credentials and cryptocurrency wallet data. The packages specifically target Anthropic’s Claude Code and Microsoft Visual Studio Code for backdoor installation. Reports have not disclosed the exact date the attack was first detected, the number of victims or the amount of losses. The key measure of its scale currently available is 1.5 million weekly downloads.
Subscribe to Mark Radar Weekly
Every Friday, the week's strongest signals in your inbox. Unsubscribe anytime.
If you search news on Google, you can set Mark Radar as a preferred source—our coverage will show up more often in your results. Set as preferred source on Google →