Back to article
thehackernews.com

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account (opens in new tab)

Covers 3 stories See all stories this covers including Active Supply Chain Attack Compromises @antv Packages on npmCovered by kite.kagi.com, Orca Security

Covers 3 related stories

Socket·

Active Supply Chain Attack Compromises @antv Packages on npm

Discussed on Hacker News
Feeds
Datadog Security Labs·

Shai-Hulud Goes Open Source

Feeds
chainguard.dev·

What the fork? Imposter commits in GitHub Actions and CI/CD

Discussed on Hacker News
Feeds

Covered in 3 articles

Orca Security·

Massive npm Supply Chain Attack Compromises AntV Ecosystem, Steals CI/CD Secrets at Scale

Feeds

In other languages

kite.kagi.com·

Mini Shai-Hulud 웜, 수백 개의 npm 패키지 감염

Feeds
kite.kagi.com·

Shai-Hulud 클론을 통해 확산되는 Npm 공급망 공격

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help