Tag: @antv packages

1 Attack Reports | 0 Vulnerabilities

Attack reports

Active Supply Chain Attack Compromises Packages on npm

An active npm supply chain attack has compromised packages in the @antv ecosystem, affecting the maintainer account 'atool'. The attack is part of the Mini Shai-Hulud campaign, involving 639 compromised package versions across 323 unique packages. Notable affected packages include echarts-for-react…
credential theft
npm
supply chain attack
ci/cd compromise
github exfiltration
mini shai-hulud
2026-05-19
@antv packages
echarts-for-react
Published: May 19, 2026
Downloadable IOCs: 1
Click here to see more Attack Reports