TeamPCP 'Mini Shai-Hulud' npm Worm Chains GitHub Actions, OIDC Poisoning to Breach GitHub Internal Repos, Grafana, OpenAI via TanStack Compromise

TeamPCP's self-replicating Mini Shai-Hulud supply chain worm compromised 84 malicious artifacts across 42 TanStack npm packages on May 11, abusing GitHub Actions workflows and OIDC token theft to propagate through CI/CD pipelines — marking the first documented malicious npm package carrying valid SLSA provenance. GitHub confirmed exfiltration of approximately 3,800 private repositories; Grafana Labs refused an extortion demand after its codebase was stolen via a single un-rotated workflow token; OpenAI confirmed two employee devices were compromised with code-signing keys for Windows, macOS, iOS, and Android apps now being revoked. The same C2 subnet (83.142.209.0/24) links this wave to TeamPCP's earlier Trivy and Bitwarden CLI compromises, indicating a sustained, pre-planned campaign.

The same C2 subnet (83.142.209.0/24) links this wave to TeamPCP's earlier Trivy and Bitwarden CLI compromises, indicating a sustained, pre-planned campaign.

This intelligence brief has been compiled from open-source reporting and corroborated across multiple threat intelligence sources. Defenders should treat the critical severity rating as a guide to prioritization within their environment.

For the latest indicators of compromise, formatted SIEM queries, and unredacted actor intelligence related to this brief, DMZ Operator subscribers receive automated IOC packages via email the moment new advisories are published.