Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account

Snyk·May 19

✦ NabkaNews BriefAuto-summarized from multiple outlets · verify with the source

A supply chain attack, known as Mini Shai-Hulud, has compromised an npm maintainer account and published over 300 malicious packages targeting the AntV ecosystem. The compromised packages may enable credential theft, particularly in continuous integration and continuous deployment (CI/CD) environments. The attack has been reported to affect the @antv ecosystem, with multiple sources confirming the breach.

Full coverage

Shai-Hulud: Here We Go Again. Mass npm Supply Chain Attack Hits the AntV Ecosystem

StepSecurity·May 19

Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft

Microsoft·May 20

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

The Hacker News·May 19

The @antv Ecosystem Was Compromised with Shai-Hulud Malware, 300+ Packages Affected

OX Security·May 19

Shai-Hulud Is Back, and npm Maintainer Accounts Are Still the Soft Target

Sonatype·May 19

View original report at Snyk ↗