/ Software
AntV and the Next Mini Shai-Hulud Wave Across the npm Ecosystem
The AntV wave showed how Mini Shai-Hulud evolved from a high-profile compromise into a mass npm credential-harvesting campaign across hundreds of packages.
Tag.index
#Javascript
Posts tagged Javascript.
Posts
/ Software
Shai Hulud, TanStack, and the Return of Install-Time Supply Chain Malware
The Shai Hulud campaign showed how quickly modern package ecosystems can turn a compromised maintainer or CI path into broad install-time credential theft.