https://detection.fyi/sigmahq/sigma/emerging-threats/2026/malware/tanstack-supply-chain/ Recent content in TanStack-Supply-Chain on Detection.FYI Hugo -- gohugo.io Thu, 09 Jul 2026 14:03:12 +0000 https://detection.fyi/sigmahq/sigma/emerging-threats/2026/malware/tanstack-supply-chain/dns_query_win_malware_tanstack_supply_chain_c2/ Thu, 09 Jul 2026 14:03:12 +0000 https://detection.fyi/sigmahq/sigma/emerging-threats/2026/malware/tanstack-supply-chain/dns_query_win_malware_tanstack_supply_chain_c2/ Detects DNS queries to attacker-controlled infrastructure used by the Mini Shai-Hulud campaign targeting TanStack npm packages along with other packages such as mistralai, uipath and so on. The domain git-tanstack.com (registered May 9, 2026) hosted secondary payloads including transformers.pyz. The filev2.getsession.org endpoint was used for credential exfiltration via the Session protocol. https://detection.fyi/sigmahq/sigma/emerging-threats/2026/malware/tanstack-supply-chain/proc_creation_lnx_malware_tanstack_supply_chain/ Thu, 09 Jul 2026 14:03:12 +0000 https://detection.fyi/sigmahq/sigma/emerging-threats/2026/malware/tanstack-supply-chain/proc_creation_lnx_malware_tanstack_supply_chain/ Detects process execution indicators associated with the Mini Shai-Hulud supply-chain campaign targeting TanStack npm packages and others such as mistralai and uipath reported on early May 2026. The preinstall hook runs setup.mjs, which downloads a platform-specific Bun runtime. https://detection.fyi/sigmahq/sigma/emerging-threats/2026/malware/tanstack-supply-chain/proc_creation_win_malware_tanstack_supply_chain/ Thu, 09 Jul 2026 14:03:12 +0000 https://detection.fyi/sigmahq/sigma/emerging-threats/2026/malware/tanstack-supply-chain/proc_creation_win_malware_tanstack_supply_chain/ Detects process execution indicators associated with the Mini Shai-Hulud supply-chain campaign targeting TanStack npm packages and others such as mistralai, uipath reported on early May 2026. https://detection.fyi/sigmahq/sigma/emerging-threats/2026/malware/tanstack-supply-chain/file_event_lnx_malware_tanstack_supply_chain/ Thu, 09 Jul 2026 14:03:12 +0000 https://detection.fyi/sigmahq/sigma/emerging-threats/2026/malware/tanstack-supply-chain/file_event_lnx_malware_tanstack_supply_chain/ Detects file creation indicators associated with the Mini Shai-Hulud supply-chain campaign targeting TanStack npm packages and others such as mistralai and uipath reported on early May 2026. https://detection.fyi/sigmahq/sigma/emerging-threats/2026/malware/tanstack-supply-chain/file_event_win_malware_tanstack_supply_chain/ Thu, 09 Jul 2026 14:03:12 +0000 https://detection.fyi/sigmahq/sigma/emerging-threats/2026/malware/tanstack-supply-chain/file_event_win_malware_tanstack_supply_chain/ Detects file creation indicators associated with the Mini Shai-Hulud supply-chain campaign targeting TanStack npm packages and others such as mistralai, uipath, etc reported on early May 2026.