Sophisticated "Mini Shai-Hulud" Supply Chain Attack Targets @antv npm Ecosystem A newly uncovered supply chain attack, dubbed Mini Shai-Hulud, compromised the @antv npm ecosystem a widely used collection of data visualization libraries with devastating precision. The campaign, discovered by Microsoft security researchers, exploited a maintainer account to publish malicious versions of popular packages, including echarts-for-react, which boasts over one million weekly downloads. The attack spread rapidly, infecting thousands of developer pipelines within hours. The payload, a 499 KB obfuscated JavaScript file, executed automatically during `npm install`, targeting GitHub Actions environments to steal credentials from cloud services like AWS, HashiCorp Vault, Kubernetes, npm, and 1Password. It bypassed standard secret masking by scraping process memory directly from GitHub Actions runners. To evade detection, the malware employed two layers of obfuscation Base64-encoded strings and a custom cipher using PBKDF2 and SHA-256 and exited immediately if not running in a GitHub Actions Linux environment. Data exfiltration occurred via encrypted HTTPS to a command-and-control domain or through GitHub’s Git Data API, creating commits in victim repositories. GitHub responded by removing 640 malicious packages and invalidating over 61,000 npm tokens. The @antv maintainers confirmed the breach has been resolved, though Microsoft advises developers to audit dependency trees, rotate exposed credentials, and check for unexpected public repositories created during the attack window. Indicators of compromise include the malicious payload’s SHA-256 hashes (a68dd1e6a6e35ec3771e1f94fe796f55dfe65a2b94560516ff4ac189390dfa1c and fb5c97557230a27460fdab01fafcfabeaa49590bafd5b6ef30501aa9e0a51142) and the domain t.m-kosche[.]com:443. The attack highlights the growing threat of supply chain compromises in open-source ecosystems.