Back to article

Aikido Security's Blog

Mini Shai-Hulud strikes again: npm worm compromises hundreds of @antv packages (opens in new tab)

Covered by 10 sources including BleepingComputer, This Week In 4n6

Covered in 10 articles

BleepingComputer·

New Shai-Hulud malware wave compromises 600 npm packages

This Week In 4n6·

Week 21

infoworld.com·

AntV data visualization tool the latest to be hit by ongoing npm supply chain attacks

Help Net Security·

GitHub, Grafana Labs breaches traced back to TanStack supply chain compromise

Google's plan to catch up in AI coding

csoonline.com·

AntV data visualization tool the latest to be hit by ongoing npm supply chain attacks

GitHub says malicious VS Code extension compromised 3,800 internal repositories

GitHub Confirms Internal Breach

news.risky.biz·

Risky Bulletin: Microsoft takes down MSaaS used by ransomware gangs

Mini Shai-Hulud returns, compromising hundreds of npm packages