Technology ❯ Cybersecurity ❯ Malware ❯ Supply Chain Attacks

NPM Packages

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

Stolen maintainer credentials let the worm ship install-time stealers that raid developer and CI secrets.

Phished npm Maintainer’s Packages Used in Crypto-Clipping Attack as Rapid Takedown Limits Damage