TanStack npm compromise spreads into Mini Shai-Hulud campaign

This looks less like a single compromised package family and more like a supply-chain worm that is moving across ecosystems with AI dev tooling in its blast radius.

• –The incident is framed as a broader campaign, not a one-off TanStack event.
• –The reported targets span both npm and PyPI, which raises the operational risk for polyglot teams.
• –If the Claude Code hook claim is accurate, assistant-driven installs and CI publish flows become part of the attack surface.
• –The practical takeaway is to treat dependency installation, trusted publishing, and build-time hooks as high-risk until provenance is verified.