Shai-Hulud Trinitite Worm Infects Popular TanStack Query npm Package to Steal Developer Secrets
Mon Aug 31 2026
Development
Malware
Open Source
gbhackers.com
A new Shai-Hulud supply-chain attack dubbed Trinitite has compromised the npm package @7nohe/openapi-react-query-codegen, a TanStack Query code-generation library with more than 150,000 weekly downloads. The malicious releases deploy an evolved Mini Shai-Hulud worm designed to steal developer, cloud, CI/CD, package-registry, Kubernetes, Vault, and source-control credentials before using recovered access to spread through additional packages. While […]
The post Shai-Hulud Trinitite Worm Infects Popular TanStack Query npm Package to Steal Developer Secrets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.