§ safety · storyline
Threat actors publish 600+ malicious npm packages in Shai-Hulud
Threat actors published over 600 malicious npm packages in the Shai-Hulud supply chain campaign, targeting primarily the @antv ecosystem.
Bill Toulas / BleepingComputer: Threat actors published 600+ malicious versions to npm as part of the Shai-Hulud supply chain campaign; most of the affected packages are in the @antv ecosystem — Threat actors earlier today published more than 600 malicious packages to the Node Package Manager (npm) index as part of a new Shai-Hulud supply-chain campaign.
§ sources1 publication · timeline below