Mini Shai-Hulud npm worm: detect, rotate, and shrink your blast radius
| 8 min read
TanStack, Mistral AI, and UiPath npm packages got hit on May 11, 2026. A 60-second detection script, a rotation-first checklist, and the single-purpose APIs that replace four of the most-poisoned package types.
This article is available in English.
Read full article in English开始使用 botoi 构建
150+ 个 API 端点，涵盖查询、文本处理、图片生成和开发者工具。免费套餐，无需信用卡。