{ads}

›

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

Written By Monday, 18 May 2026 Add Comment



May 19, 2026 at 10:24AM

Cybersecurity researchers have discovered a fresh software supply chain attack campaign that has compromised various npm packages associated with the @antv ecosystem as part of the ongoing Mini Shai-Hulud attack wave. "The attack affects packages tied to the npm maintainer account atool, including echarts-for-react, a widely used React wrapper for Apache ECharts with roughly 1.1 million weekly

from The Hacker News https://ift.tt/5L72tAu

0 Response to "Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account"

Post a Comment

Subscribe to: Post Comments (Atom)

Article Top Ads

Central Ads Article 1

Middle Ads Article 2

Article Bottom Ads