Vendor
OpenSearch
- First Reported
- May 12, 2026
- Latest Reported
- May 12, 2026
Reported Context (1)
- TeamPCP’s Mini Shai-Hulud campaign has compromised npm and PyPI packages from TanStack, UiPath, Mistral AI, OpenSearch, and Guardrails AI with credential-stealing malware and malicious GitHub Actions workflows. TeamPCP’s Mini Shai-Hulud Worm Spreads Through Compromised npm and PyPI Packages
CVE (1)
Malware (1)
People (1)
Threat Actors (1)
MITRE ATT&CK (9)
Vendors (5)
Products (5)
Industries (3)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.