Hackers have compromised dozens of popular open source packages in an ongoing supply chain attack

May 19, 2026 Lorenzo Franceschi-Bicchierai

The attacks are part of a wider campaign known as Mini Shai-Hulud, which has already compromised several open source projects and, in turn, developers and companies that use them.

Previous Article
The minimalist Light Phone teams up with Andrew Yang’s Noble Mobile, which pays you to stop doomscrolling
The minimalist Light Phone teams up with Andrew Yang’s Noble Mobile, which pays you to stop doomscrolling

"The Light Phone is designed to be used as little as possible," founder Joe Hollier told TechCrunch.

Next Article
US cyber agency CISA exposed reams of passwords and cloud keys to the open web
US cyber agency CISA exposed reams of passwords and cloud keys to the open web

The federal cybersecurity agency left plaintext passwords in a spreadsheet uploaded to a public GitHub repo...