Mini Shai-Hulud Worm Targets AntV Ecosystem with Coordinated npm Package Attack

In a shocking one-hour surge, 639 malicious versions were pushed across 323 unique npm packages, crippling the AntV ecosystem with a massive coordinated attack linked to the Mini Shai-Hulud worm. This brazen move was designed not only to spread chaos but also to slow down analysis and detection efforts.

https://osintsights.com/mini-shai-hulud-worm-targets-antv-ecosystem-with-coordinated-npm-package-attack?utm_source=mastodon&utm_medium=social

#MiniShaihulud #NpmPackageAttack #AntvEcosystem #SupplyChain #EmergingThreats

«Hunderte bösartige npm-Pakete im AntV-Ökosystem entdeckt:
Das Datenvisualisierungs-Ökosystem AntV war Ziel einer Mini-Shai-Hulud-Lieferkettenattacke mit Hunderten schädlicher npm-Pakete.»

Schon wieder viele npm-Pakete. Liegt das an npm selber oder ist dies im allgemeinen ein Code-Struktur-Fehler? Betreffen tut es schlussendlich alle User dieser Software, auch wenn die es "nur" nutzen.

🧑‍💻 https://www.heise.de/news/Hunderte-boesartige-npm-Pakete-im-AntV-Oekosystem-entdeckt-11300242.html

#npm #minishaihulud #itsicherheit #js #ts #javascript #typescript #webdev #antv

Malware Campaign Compromises Hundreds of npm Packages

A new, highly aggressive malware campaign, linked to the notorious TeamPCP group, has infected hundreds of npm packages, putting countless environments at risk of exposure. If you're concerned about potential damage, take immediate action to rotate secrets, remove persistence artifacts, and review recent publish activity.

https://osintsights.com/malware-campaign-compromises-hundreds-of-npm-packages?utm_source=mastodon&utm_medium=social

#MalwareOperations #Npm #Teampcp #MiniShaihulud #SupplyChain

Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised

https://safedep.io/mini-shai-hulud-strikes-again-314-npm-packages-compromised/

#HackerNews #MiniShaiHulud #npmSecurity #CyberThreats #PackageCompromise #SoftwareVulnerability

https://winbuzzer.com/2026/05/15/openai-confirms-security-breach-in-tanstack-supply-xcxwbn/

OpenAI confirmed that a poisoned open-source package breached employee devices and let attackers steal credentials from a limited set of its internal source code repositories.

#AI #OpenAI #Cybersecurity #Malware #DataBreaches #TanStack #MiniShaiHulud #npm

📢⚠️ A #TeamPCP-linked account claims to be selling alleged internal Mistral AI repositories days after the Mini Shai-Hulud supply chain attacks targeted npm and PyPI packages linked to the AI company.

Read: https://hackread.com/teampcp-mistral-ai-repositories-mini-shai-hulud-attack/

#CyberSecurity #MistralAI #MiniShaiHulud #DataBreach