Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

A supply chain attack campaign named Mini Shai-Hulud has compromised npm packages in the @antv ecosystem through a hijacked maintainer account, distributing malicious code to hundreds of thousands of developers.

• •639 malicious versions were published across 323 unique packages, including the widely-used echarts-for-react with 1.1 million weekly downloads
• •The malware harvests 20+ credential types including AWS, Azure, Google Cloud, GitHub, npm, SSH, Kubernetes, and database connection strings
• •Uses automated rapid deployment with preinstall hooks and injects malicious dependencies via legitimate repositories
• •Leverages Sigstore OIDC token abuse to forge SLSA provenance attestations, making malicious packages appear legitimate
• •