TeamPCP Supply Chain Campaign: Activity Through 2026-05-17, (Mon, May 18th)

The TeamPCP supply chain campaign intensified significantly on May 17th, 2026, marked by the confirmed compromise of a Checkmarx Jenkins plugin and the emergence of a new Mini Shai-Hulud worm. This campaign targeted npm and PyPI, impacting numerous packages including TanStack components, and introduced novel techniques…