Security Advisory Review: Shai-Hulud / CVE-2026-45321 — MeshMonitor is Not Affected

[Yeraze]

Security Advisory Review: Shai-Hulud / CVE-2026-45321 — MeshMonitor is Not Affected

Date: 2026-05-16
Reviewer: Maintainer
Disposition: ✅ Not affected — no remediation required

---

Background

In May 2026, a new wave of the "Mini Shai-Hulud" npm supply-chain worm compromised ~42 packages in the @tanstack namespace, along with secondary victims in @mistralai, @uipath, @draftlab, @squawk, @guardrails, @opensearch-project, and others. The TanStack incident was assigned CVE-2026-45321 (CVSS 9.6). Affected versions ship a malicious payload that:

• Exfiltrates developer credentials (npm tokens, GitHub tokens, cloud keys) to attacker-controlled domains.
• Drops persistence artifacts into .claude/, .vscode/, and user systemd/launchd directories.
• Injects a codeql_analysis.yml workflow to exfiltrate via CI.
• Self-propagates by republishing infected versions of additional packages.

Confirmed compromised packages include the TanStack router family (@tanstack/react-router, vue-router, solid-router, router-core, react-start, router-plugin) at versions 1.169.5, 1.169.8, 1.167.68, 1.167.71, 1.167.38, 1.167.41.

Why we checked

MeshMonitor depends on packages in the @tanstack/* namespace, so a manual review was warranted to confirm we were not pulling a compromised package or version, directly or transitively.

What we verified

1. Installed @tanstack/* packages are not on the compromised list

We ship from the query and virtual lines only — not the router line that was hit:

@tanstack/query-core            5.100.9
@tanstack/query-devtools        5.100.9
@tanstack/react-query           5.100.9
@tanstack/react-query-devtools  5.100.9
@tanstack/react-virtual         3.13.24
@tanstack/virtual-core          3.14.0

None of these packages or versions appear in the GHSA-g7cv-rxg3-hmpx advisory. No manifest (package.json, package-lock.json, desktop/package.json, tests/mock-oidc/package.json, protobufs/packages/ts/package.json) references any compromised router package or the malicious "@tanstack/setup": "github:tanstack/router#…" dependency.

2. No payload files in the tree

Searched the full repo (including node_modules/@tanstack/*) for the known payload filenames:

• router_init.js — not present
• router_runtime.js — not present
• tanstack_runner.js — not present
• setup.mjs — not present
• bundle.js (root-level) — not present
• shai-hulud* — not present

3. No persistence artifacts

• .claude/ contains only the expected agent-memory/, agents/, commands/, skills/, settings.json, and a benign Claude Code session lockfile. No router_runtime.js or setup.mjs.
• .vscode/ directory does not exist.
• No ~/.config/systemd/user/gh-token-monitor.service on dev host.
• No injected .github/workflows/codeql_analysis.yml — our existing codeql.yml is the legitimate one.

4. No network or string IOCs

Grep of the full repo returned zero hits for:

• filev2.getsession.org
• api.masscan.cloud
• git-tanstack.com
• litter.catbox.moe
• IP 83.142.209.194
• PBKDF2 salt svksjrhjkcejg
• Campaign string IfYouRevokeThisTokenItWillWipeTheComputerOfTheOwner
• Marker strings Shai-Hulud: Here We Go Again. / Mini Shai-Hulud has Appeared.
• gh-token-monitor

Disposition

MeshMonitor is not affected by CVE-2026-45321. No code changes, dependency bumps, token rotation, or user action is required.

Forward-looking guidance

• If a future PR proposes adding @tanstack/react-router or any other router-family @tanstack/* package, verify the resolved version is outside the compromised set in GHSA-g7cv-rxg3-hmpx before merging.
• Dependabot is already configured for this repo and will surface advisory updates as they are published.
• If you self-host MeshMonitor and run npm install in a dev environment that also installs other unrelated packages, we recommend scanning your own host for the IOCs listed above.

References

• Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More — The Hacker News
• TanStack npm Packages Hit by Mini Shai-Hulud — Snyk
• "Shai-Hulud" Worm Compromises npm Ecosystem — Unit 42
• Mini Shai-Hulud Strikes Again — Wiz
• GHSA-g7cv-rxg3-hmpx