Mini Shai-Hulud Worm Hits Hundreds of npm Packages in AntV Ecosystem (infosecurity-magazine.com)

• Worm infects hundreds of npm packages in Alibaba's AntV ecosystem
• Largest known npm supply chain attack wave
• Attack uses compromised maintainer accounts or build pipelines

"A worm named Mini Shai-Hulud has compromised hundreds of npm packages within Alibaba's AntV ecosystem, marking the largest npm supply chain attack wave to date. The worm spreads through compromised credentials or build pipeline vulnerabilities. Developers are urged to audit dependencies and update to sanitized versions."