erroneo.us
Search all guides⌘K

Digest · Monday

Security digest: May 11, 2026

1 editorial brief and 9 critical advisories.

All digests · RSS · Markdown

Take stock

  • Check exposure: Mini Shai-Hulud. Teams that installed @tanstack Router/Start packages on May 11, 2026, or the Mistral, Guardrails AI, UiPath, OpenSearch or other worm-propagated versions during the campaign.
  • npm: 4 critical advisories (angular-expressions, @nyariv/sandboxjs, @tanstack/arktype-adapter, @tanstack/eslint-plugin-router, @tanstack/eslint-plugin-start, @tanstack/history, @tanstack/nitro-v2-vite-plugin, @tanstack/react-router …). Check with npm audit (or: npm ls <package>).
  • PyPI: 2 critical advisories (pgadmin4, PraisonAI). Check with pip-audit (or: pip show <package>).
  • Maven: 1 critical advisory (io.unitycatalog:unitycatalog-server). Check with mvn dependency:tree -Dincludes=<groupId>:<artifactId>.
  • Composer (PHP): 1 critical advisory (torrentpier/torrentpier). Check with composer audit.
  • Go: 1 critical advisory (github.com/cloudnative-pg/cloudnative-pg). Check with govulncheck ./....
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Check exposure

· Supply-chain compromise · CVE-2026-45321

Mini Shai-Hulud: TanStack npm Worm With Valid Provenance

If a lockfile picked up one of the bad TanStack Router/Start, Mistral or OpenSearch versions in mid-May 2026, treat that host as fully compromised and disable the dead-man's switch before rotating anything; everyone else can confirm and move on.

Must act: Teams that installed @tanstack Router/Start packages on May 11, 2026, or the Mistral, Guardrails AI, UiPath, OpenSearch or other worm-propagated versions during the campaign.

Can relax: TanStack Query, Table, Form, Virtual and Store users were not affected, and every TanStack version available on npm since May 15, 2026 is clean.

  1. Check lockfiles for GHSA-g7cv-rxg3-hmpx versions and for the @tanstack/setup git optionalDependency
  2. On affected hosts, disable and delete gh-token-monitor (systemd unit, LaunchAgent, script) BEFORE revoking tokens
  3. Remove .claude/ and .vscode/ hooks and injected codeql_analysis.yml workflows; revert commits by claude@users.noreply.github.com

Read the brief →

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 9

GitHub-reviewed advisories rated critical, published this day (Pacific time).

npm 4

Check: npm audit (or: npm ls <package>)

PyPI 2

Check: pip-audit (or: pip show <package>)

Composer (PHP) 1

Check: composer audit

Go 1

Check: govulncheck ./...

Maven 1

Check: mvn dependency:tree -Dincludes=<groupId>:<artifactId>