Mini Shai Hulud: Compromised @ antv npm Packages Enable CI/CD Credential Theft, by (not on Mastodon or Bluesky):

Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft | Microsoft Security Blog
Compromised @antv npm packages deploy the Mini Shai-Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and targets credentials across GitHub, AWS, Kubernetes, Vault, npm, and 1Password platforms.








