Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

On August 28, 2026, ten malicious versions of the npm package @7nohe/openapi-react-query-codegen were published in two waves as part of the Mini Shai-Hulud supply chain attack. A threat actor abused a comment-triggered GitHub Actions publishing workflow, allowing any GitHub account to publish fork code under the repository's trusted OIDC identity by simply commenting 'npm publish' on a pull request. All ten malicious versions carry valid npm provenance attestations, meaning npm audit signatures will not flag them. The malicious releases execute a bundled obfuscated JavaScript loader (3FWCvzduYZg.js) at install time, which decrypts an AES-128-GCM payload, writes it to a temp file, executes it, and deletes it. The latest tag still resolves to the malicious version 3.0.4 at time of writing. Users are advised to pin to known-good versions (0.5.3, 1.6.2, 2.2.0, or 3.0.2), clear caches, and treat any machine that installed an affected version as compromised. The threat actor's GitHub account (p00paboot) staged the malicious code via a fork of the repository.