Mini Shai-Hulud Hits Hundreds of npm Packages in AntV Ecosystem

Infosecurity Magazine·May 20

✦ NabkaNews BriefAuto-summarized from multiple outlets · verify with the source

A supply chain attack, known as Mini Shai-Hulud, has compromised hundreds of npm packages in the AntV ecosystem. The attack appears to have been carried out through a compromised maintainer account, potentially enabling credential theft. The exact scope and impact of the attack are not entirely clear, but it is reported to have affected over 300 packages.

Full coverage

Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account

Snyk·May 19

Shai-Hulud: Here We Go Again. Mass npm Supply Chain Attack Hits the AntV Ecosystem

StepSecurity·May 19

Mini Shai-Hulud Hits @antv: 323 npm Packages Compromised Through the atool Maintainer Account

Security Boulevard·May 19

Massive npm Supply Chain Attack Compromises AntV Packages

The Cyber Express·May 19

What is Mini Shai-Hulud npm supply chain attack, and was Microsoft and Socket hit by malware? Full explain

The Economic Times·May 19

View original report at Infosecurity Magazine ↗

Fetching the latest headlines…