314 npm packages just got compromised, 271 @antv

programming

g/programming

4mo

ago

public

earned

reactions

#programming

#dev

#technology

314 npm packages just got compromised, 271

@antv

, echarts-for-react, size-sensor, timeago.js

`atool` maintainer account got hacked, and attacker pushed 631 malicious versions across 314 packages in 22 minutes. another day and another attack. it steals everything like AWS keys, GitHub tokens, npm creds, SSH keys, database strings, docker configs, kubernetes tokens. If you have docker socket exposed, it escapes the container with privileged access.
#programming #dev #technology

Mini Shai-Hulud Strikes Again: 317 npm Packages Compromised

A compromised npm maintainer account published 637 malicious versions across 317 packages including size-sensor, echarts-for-react, timeago.js, and hundreds of @antv scoped packages, affecting 15M+ monthly downloads.

	earnings
	4,000 mlx total
	$0 total

	engagement
	5 views
	0 reactions

314 npm packages just got compromised, 271 @antv…

0 comments