guardrails-ai PyPI package carried Shai-Hulud

Catalogued from the tstromberg supplychain-attack-data dataset
(community-curated incident corpus). Included because first-party
sources exist for it; see the links below — vendor advisories, project
incident reports, and researcher write-ups. Not based on aggregator
coverage.

Mapped techniques

T0121 Compromised legitimate artifact
T0109 Publish malicious artifact

supply-chain campaign

T0121 · Resource Development · Compromised legitimate artifact

Published package versions carried the payload.

T0109 · Resource Development · Publish malicious artifact

Named in the tstromberg supplychain-attack-data corpus with first-party references.

Sources

https://research.jfrog.com/post/shai-hulud-here-we-go-again/
https://www.securityweek.com/over-100-npm-pypi-packages-hit-in-new-shai-hulud-supply-chain-attacks/
https://www.aikido.dev/blog/mini-shai-hulud-is-back-tanstack-compromised
https://github.com/guardrails-ai/guardrails/security/advisories/GHSA-xmpw-2vmm-p4p6
https://gist.github.com/beowolx2/a3ceeb18d1f1cec977d5cc6eaf41c96a