Morning Overview on MSN
Hackers just hit @antv inside wave 4 of the TeamPCP worm — the same crew that walked off with 3,800 of GitHub’s internal repositories two weeks ago
Sometime in late May 2026, a poisoned update slipped into the @antv family of JavaScript visualization libraries, the ...
The world’s largest open-source registry, node package manager (npm), has been hit by another fast-moving malware attack, ...
Threat actors earlier today published more than 600 malicious packages to the Node Package Manager (npm) index as part of a ...
The Mini Shai-Hulud worm has resurfaced in one of its largest single-registry waves to date, hitting hundreds of npm packages ...
Cryptopolitan on MSN
Mini Shai-Hulud worm hijacks 323 npm packages under 30 minutes through a single stolen account
On May 19, the Mini Shai-Hulud worm compromised one npm maintainer account and pushed 639 malicious versions across 323 ...
Mini Shai-Hulud npm campaign compromises @antv packages, targeting blockchain developers' GitHub tokens, AWS keys, and CI/CD secrets in a coordinated supply chain attack.
A fresh Mini Shai-Hulud supply chain attack has hit over 320 NPM packages, along with GitHub Actions and a VS Code extension.
The data visualization ecosystem AntV was targeted by a Mini Shai Hulud supply chain attack involving hundreds of malicious npm packages.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results