Compromised Mistral AI and TanStack packages may have exposed GitHub, cloud and CI/CD credentials in 'mini Shai Hulud' malware infection — supply-chain campaign spreads across npm and AI developer ecosystems like wildfire
…That overlap has raised concerns that attackers are increasingly targeting developer infrastructure itself rather than end users directly. Modern development environments often contain high-value credentials, including GitHub personal access tokens, cloud…
