TeamPCP Strikes Again: TanStack, UiPath & npm Supply Chain Compromise with Wiper Daemon

Wiz documented a coordinated supply chain attack launched by TeamPCP (Mini Shai-Hulud) on May 11, 2026, compromising 89 npm packages and two PyPI packages spanning developer tooling, enterprise automation, and AI namespaces. The npm package @tanstack/react-router alone accounts for approximately 12 million weekly downloads. The campaign builds on the preinstall-hook/Bun execution chain used in prior TeamPCP waves and adds a novel GitHub Actions vector that extracts OIDC tokens directly from runner process memory, bypassing environment-variable secret masking entirely.

The payload steals credentials from developer machines and CI/CD pipelines, including, for the first time, password vault data, and self-propagates by publishing poisoned versions of the victim's own npm packages. A novel persistence daemon wipes the user's home directory if the stolen GitHub token is revoked, so teams should remove it before rotating credentials. The Python variant adds geographic targeting: on systems with timezone or language settings indicating Israel or Iran, it rolls a random value between 1 and 6 and if it lands on 2, plays an MP3 file at full volume and attempts to delete all files in the home directory. Exfiltration uses three redundant channels, including the decentralized Session Messenger network not seen in prior TeamPCP campaigns.