Mini Shai-Hulud is a worm framework open-sourced by TeamPCP in May 2026. It was used in a campaign that poisoned npm packages like keyv and cacheable in August 2026, creating self-identifying markers such as 'tpcp-docs' and 'docs-tpcp'.
Mini Shai-Hulud is a worm framework open-sourced by TeamPCP in May 2026. It was used in a campaign that poisoned npm packages like keyv and cacheable in August 2026, creating self-identifying markers such as 'tpcp-docs' and 'docs-tpcp'.