Mini Shai-Hulud Supply-Chain Worm Also Hits PyPI Packages, Including mistralai, lightning, and more

Mini Shai-Hulud is being discussed mostly as an npm supply-chain worm, but this incident also has a Python ecosystem angle. The affected package list includes PyPI packages such as guardrails-ai, lightning, and mistralai, while the malware also targets developer credentials like .pypirc, which can expose PyPI publishing tokens

More info here: https://thecybersecguru.com/news/mini-shai-hulud-npm-worm-affected-packages-list/