atool

supply-chain

TeamPCP Supply Chain Campaign: Activity Through 2026-05-24, (Mon, May 25th)

TeamPCP, a threat actor, launched a sophisticated supply chain campaign involving the trojanization of multiple software packages, impacting GitHub, Microsoft, OpenAI, Grafana Labs, and Mistral AI. The campaign utilized…

SANS Internet Storm Center · May 25, 2026 High

CVE-2026-45321 supply chain attack credential theft publisher badge

supply-chain

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

A sophisticated supply chain attack, dubbed Mini Shai-Hulud, is targeting npm packages within the @antv ecosystem. The attack leverages a compromised maintainer account to inject malicious code – specifically a credentia…

The Hacker News · May 19, 2026 High

US supply chain npm credential theft

All articles

news.mlab.sh

atool

TeamPCP Supply Chain Campaign: Activity Through 2026-05-24, (Mon, May 25th)

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account