Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
- Posted on May 19, 2026
- By The Hacker News
- 0 Views
- 1 min read
Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
Mini Shai-Hulud hits @antv and echarts-for-react via npm maintainer compromise, exposing 1.1M weekly downloads to credential theft.
