Mini Shai-Hulud Hits @antV: Here We Go Again
Date Observed: May 19, 2026Ecosystem: npm (Node.js)Targets: @antV data visualization packages, echarts-for-react, timeago.js, size-sensor, canvas-nest.js, CI/CD pipelines, developer workstations.Attack Type: Maintainer account compromise, preinstall hook injection, optionalDependencies abuse, npm worm propagationImpact: 639 malicious package versions across 323 npm packages; 2,700+ GitHub exfiltration repositories created; cloud credentials, tokens, and SSH keys stolen Key Takeaways The npm […]