Over 320 NPM Packages Hit by Fresh Mini Shai-Hulud Supply Chain Attack

A compromised maintainer account was used to publish malicious package versions across the @antv namespace.

Source SecurityWeek AI Summary Updated May 20, 2026

Story intelligence Beta

Freshness Stale Updated May 20, 2026

Confidence Checking

Coverage Checking

Views 6 Community interest

Read time 1 min ~34 words

AI Summary

A compromised maintainer account was used to publish malicious package versions across the @antv namespace. The post Over 320 NPM Packages Hit by Fresh Mini Shai-Hulud Supply Chain Attack appeared first on SecurityWeek .

Read full article on Securityweek

AI summaries can be wrong sometimes—always verify important details using the source article.