Research & KnowledgeEvent: September 2, 2026
Mend.io security research team analyzed the Mini Shai-Hulud attack on openapi-react-query-codegen, exposing how compromised npm dependencies silently steal developer secrets during routine workflows.
Published
Signal category
Research & Knowledge
Quote
“Our security research team analyzed the Mini Shai-Hulud attack on openapi-react-query-codegen, exposing how compromised npm dependencies silently steal developer secrets during routine workflows.”
— Douglas Johnson|Mend.io team
Company
Mend.io
The attack surface has changed. Most security tools haven’t. Secure the layer everyone else misses.
- Industry
- Software Development
- Location
- Boston, US
- Company size
- 259 employees
Meet the AI native AppSec platform built for enterprise scale At Mend.io, we believe security should empower, not block. Our mission is to make application security frictionless for developers and scalable for security teams without compromise.
Founded 2011