A single PR just hijacked the NPM registry...
Credibility score: 86/100 — Highly Credible. This video is highly credible with well-supported claims.
BSmeter analyzed "A single PR just hijacked the NPM registry..." and rated it 86/100 for credibility (a BS score of 14/100 — highly credible), on 2026-05-14. Its weakest claim — "Mini Shai-Hulud virus struck again in sophisticated Tanstack attack on May 14, 2026" — scored 50/100 and was flagged as just vibes. 7 claims were checked against the video transcript. Scores are produced by BSmeter's AI analysis of the transcript, not independent human verification.
Of 7 claims analyzed: 0 scored under 40, 1 between 40 and 69, and 6 at 70 or above.
Claims analyzed
100+ NPM packages compromised in 6 mins via PR, 50M downloads/week, no phishing/tokens stolen, via trusted publishing — Solid (85/100)
At 0:00
👌✅
Why this score: Matches recent NPM attacks.
- May 2026 incident: hundreds of malicious packages via misconfigured GitHub Actions (publishing tokens exploited without 'stealing').
- No phishing mentioned; aligns with PR hijack via workflow abuse.
- Scale (100+ pkgs) consistent with TanStack/Mistral compromises.
Original quote: “Just a few days ago, the worst nightmare of every open- source maintainer finally came true. No, they weren't forced to socialize with the opposite sex. Instead, in just 6 minutes, which I've been arguing for years is actually quite a long time, over 100 packages that collectively get downloaded…”
Mini Shai-Hulud virus struck again in sophisticated Tanstack attack on May 14, 2026 — Just Vibes (50/100)
At 0:30
Rodent poop cruise virus vs Mini Shai-Hulud — wild intro 😂
Why this score: *Humorous opener referencing the real Mini Shai-Hulud attack.*
- Date matches: May 14, 2026 coverage of May 11 incident.
- 'Sophisticated attack no one saw coming' aligns with novel GitHub Actions chain.
Original quote: “Heaven help us all. It is May 14th, 2026, and you're watching the code report. Life has been extra exciting lately because every time I wake up, I wonder which one is going to destroy my life first, the rodent poop cruise virus or the mini shy hallude virus. But thankfully, I'm no poop expert, so…”
Fork PR poisoned GitHub Actions shared cache — Verified (95/100)
At 2:30
✅
Why this score: Matches exact attack vector.
- Web context confirms pull_request_target exploit from fork wrote to shared CI cache, stealing npm tokens.
- CVE-2026-45321 details this precise mechanism.
Original quote: “even if the PR was created from a fork. that those permissions were enough to allow the attacker's code to write a poisoned file into the shared cache of the CI server, which is used by GitHub actions to reuse dependencies between jobs.”
Unrelated PR triggered poison, hit 84 TanStack packages — Verified (92/100)
At 2:51
👌
Why this score: Numbers and sequence spot-on.
- Attackers published 84 malicious versions across 42 @tanstack/* packages after unrelated PR merge triggered cache poison.
- 'Shy hall' = 'Shai-Hulud' worm, confirmed naming.
Original quote: “A few hours later, an unrelated pull request was merged into main. The poisoned file was triggered, which grabbed the npm publish token from the cache and used it to take a massive shy hall dump on the 84 brand new compromised Tanstack packages.”
Malware checks tokens every 60s, wipes root if expired — Verified (94/100)
At 3:39
😤✅
Why this score: 'War crime mode' behavior confirmed.
- Malware runs 60-second token validation loop; expired tokens trigger root directory wipe ('war crime mode').
- Exact persistence mechanism documented.
Original quote: “if you were infected, the malware also installed a background process that would quietly check every 60 seconds whether your stolen GitHub token was still valid. The moment your token expires, it activates war crime mode and nukes your root directory.”
Victims: Mistral AI, UiPath, OpenSearch, Guardrails AI, Squawk — Solid (88/100)
At 4:00
✅
Why this score: Victim list confirmed.
- Exact companies named in reports: Mistral AI, UiPath, OpenSearch, Guardrails AI, Squawk.
- Worm spread via stolen maintainer tokens, as described.
Original quote: “The first wave of victims included maintainers at Mistral AI, UiPath, Open Search, Guardrails AI, and Squawk. Within hours, those companies pushed compromised packages onto the mpm registry as well.”
Aikido tracked 373 poisoned versions in 169 packages — Verified (96/100)
At 4:25
💯
Why this score: Precise stats match reports.
- Aikido Security tracked exactly 373 poisoned versions across 169 packages by next morning.
- Demonstrates research depth.
Original quote: “And by the next morning, security firm Aikido was tracking 373 poisoned versions across 169 packages.”
See the full analysis with timestamps →