Storia in 6 fonti

Hunderte bösartige npm-Pakete im AntV-Ökosystem entdeckt

Das Datenvisualisierungs-Ökosystem AntV war Ziel einer Mini-Shai-Hulud-Lieferkettenattacke mit Hunderten schädlicher npm-Pakete.

Raccontata da

martedì 19 maggio 2026·infoworld.com
AntV data visualization tool the latest to be hit by ongoing npm supply chain attacks
The largest incident yet is a warning that developers should urgently check package security, say experts.
martedì 19 maggio 2026·thehackernews.com
Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
Mini Shai-Hulud hits @antv and echarts-for-react via npm maintainer compromise, exposing 1.1M weekly downloads to credential theft.

martedì 19 maggio 2026·

bleepingcomputer.com

New Shai-Hulud malware wave compromises 600 npm packages

Threat actors earlier today published more than 600 malicious packages to the Node Package Manager (npm) index as part of a new Shai-Hulud supply-chain campaign.

mercoledì 20 maggio 2026·

ilsoftware.it

Nuova ondata di attacchi colpisce centinaia di pacchetti npm

Attacco supply chain su npm: 314 pacchetti compromessi dal malware Mini Shai-Hulud e propagazione tra dipendenze.

mercoledì 20 maggio 2026·

heise.de