A malicious attack, referred to as Mini Shai-Hulud, has compromised the npm ecosystem, with reports of multiple packages being affected. The number of compromised packages varies, with some outlets reporting over 600 packages impacted, while others specify 42 or over 300 malicious packages. The attack appears to have targeted various platforms, including AntV and TanStack, with some packages reportedly bearing fake Sigstore badges.