Reverse Shai-Hulud: Supply chain compromise impacts @antv packages

Beyond Detection: Building a Resilient Software Supply Chain (Lessons from the Shai-Hulud Post-Mortem)

Microsoft uncovers supply chain attack: Compromised @antv npm packages steal CI/CD credentials via Mini Shai-Hulud malware

Microsoft has identified an active supply chain attack targeting the @antv npm package ecosystem. A threat actor compromised an @antv mainta

Shai-Hulud: Largest npm Supply-Chain Compromise Affecting CrowdStrike and Hundreds of Packages

The Shai-Hulud malware campaign represents the largest and most dangerous npm supply-chain compromise in history, affecting hundreds of pack

Zero-day Extensive NPM Package Compromise - Shai Hulud Supply Chain Attack

Supply Chain Attack Compromises @immobiliarelabs Backstage npm Packages

Socket Threat Research has identified a supply chain compromise dubbed "Miasma Mini Shai-Hulud" targeting legitimate @immobiliarelabs Backst

Post-Mortem Analysis: How Our Company Was Compromised by the Shai-Hulud 2.0 npm Supply Chain Worm

The article details a company's experience being compromised by the Shai-Hulud 2.0 npm supply chain worm on November 25th, 2025. It describe