41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a0bdd5-13a5-7286-8a76-70bf28208403

Mini Shai-Hulud: Where SLSA’s Boundaries Fall

OpenSSF Blog · published 10 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at openssf.org Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 16
Words captured: 2,173

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://slsa.dev/blog/2026/05/mini-shai-hulud-what-slsa-can-and-cannot-do

slsa.dev

https://slsa.dev/spec/v1.2/build-requirements

slsa.dev

https://slsa.dev/spec/v1.2/levels

slsa.dev

https://slsa.dev/spec/v1.2/verifying-artifacts

slsa.dev

https://slsa.dev/spec/v1.2/threats

slsa.dev

https://colocatedeventsna2025.sched.com/event/28D22/

colocatedeventsna2025.sched.com

https://colocatedeventseu2026.sched.com/event/2DY1G/

colocatedeventseu2026.sched.com

https://slsa.dev/spec/v1.2/source-requirements

slsa.dev

https://openssf.org/groups/orbit/

openssf.org

Postmortem: TanStack npm supply-chain compromise Read at the source ↗

https://github.com/advisories/GHSA-g7cv-rxg3-hmpx

github.com

TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack Read at the source ↗

https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem

stepsecurity.io

https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack

socket.dev

Hardening TanStack After the npm Compromise Read at the source ↗

https://arew-m.medium.com/signed-doesnt-mean-safe-7261b0763ea0

arew-m.medium.com