Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

A sophisticated supply chain attack, dubbed Mini Shai-Hulud, is targeting npm packages within the @antv ecosystem. The attack leverages a compromised maintainer account to inject malicious code – specifically a credential-stealing payload – into numerous open-source packages, including widely used React components. This campaign, attributed to TeamPCP, utilizes automated techniques like stolen npm tokens and Sigstore forgery to rapidly propagate the malware and exfiltrate sensitive data, posing a significant risk to organizations relying on these vulnerable packages.