Major npm Supply Chain Attack Compromises Hundreds of AntV Packages in Credential-Theft Campaign A sophisticated software supply chain attack has compromised over 300 npm packages tied to the AntV ecosystem, a widely used JavaScript library suite for data visualization and enterprise dashboards. Security researchers at Socket.dev and Snyk attribute the breach to the "Mini Shai-Hulud" malware campaign, an ongoing operation targeting the JavaScript ecosystem through hijacked maintainer accounts. The attack began when threat actors compromised the npm account "atool", using it to publish malicious updates across high-profile packages including echarts-for-react, size-sensor, timeago.js, @antv/g6, @antv/g2, and @antv/x6 within a 22-minute window. Collectively, these packages see tens of millions of downloads per month, amplifying the potential impact across financial services, analytics platforms, and web applications. The malware goes beyond basic backdoors, designed to steal sensitive credentials from developer environments and CI/CD pipelines, including: - AWS credentials - GitHub and npm tokens - SSH keys - Docker and Kubernetes configurations In some cases, the payload also attempted container escape techniques if Docker sockets were exposed. The attack follows the same worm-like propagation seen in earlier "Mini Shai-Hulud" campaigns, which previously targeted SAP and AI-related npm packages in 2026. This incident mirrors a growing trend of npm supply chain attacks, where threat actors compromise maintainer accounts or CI/CD workflows to distribute malware via automated dependency updates. Similar breaches this year have affected packages tied to Axios, TanStack, and SAP, often relying on rapid, undetected distribution before mitigation. While some malicious versions were later deprecated or removed, security experts warn that any system that installed affected packages should be considered compromised. Researchers from Microsoft and Socket Security have advised organizations to audit dependencies, pin safe versions, and rotate exposed credentials, as modern malware often executes during installation rather than runtime leaving minimal forensic traces. The attack underscores the fragility of the npm ecosystem, where a single compromised maintainer account can trigger a cascading impact across global enterprise environments. Recent academic research found that over 21% of npm packages inherit known vulnerabilities through dependency chains, further exposing the risks of interconnected open-source software.