Socket

Active Supply Chain Attack Compromises @antv Packages on npm (opens in new tab)

Covered by 16 sources See all sources covering this story including BleepingComputer, This Week In 4n6Discussed on Hacker News

Active npm supply chain attack compromises @antv packages in a fast-moving malicious publish wave tied to Mini Shai-Hulud.

Read the original article
Sign in to keep reading the full article.
Sign UpLog In

Covered in 16 articles

BleepingComputer·

New Shai-Hulud malware wave compromises 600 npm packages

Feeds
This Week In 4n6·

Week 21

Feeds
microsoft.com·

Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft

Feeds
View all 16 ›

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help