Lucene search
+L

61498 matches found

OSV
OSV
added 2026/05/19 12:00 a.m.18 views

MAL-2026-3869 Malicious code in @antv/data-wizard (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:00 a.m.16 views

MAL-2026-3853 Malicious code in @antv/ava (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:00 a.m.19 views

MAL-2026-4029 Malicious code in @antv/insight-component (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:00 a.m.13 views

MAL-2026-4026 Malicious code in @antv/graphlib (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:00 a.m.13 views

MAL-2026-4011 Malicious code in @antv/gi-cli (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:00 a.m.15 views

MAL-2026-3968 Malicious code in @antv/g-webgpu-compiler (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:00 a.m.12 views

MAL-2026-4120 Malicious code in @antv/xflow-diff (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:00 a.m.16 views

MAL-2026-3872 Malicious code in @antv/dipper-map (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:00 a.m.12 views

MAL-2026-3878 Malicious code in @antv/dw-util (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:00 a.m.10 views

MAL-2026-4079 Malicious code in @antv/s2-react-components (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:00 a.m.15 views

MAL-2026-4068 Malicious code in @antv/mcp-server-antv (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:00 a.m.11 views

MAL-2026-4056 Malicious code in @antv/larkmap (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:00 a.m.15 views

MAL-2026-4059 Malicious code in @antv/li-aiearth-assets (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/19 12:00 a.m.15 views

Malicious code in @antv/g2 (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
Spring Security Advisories
Spring Security Advisories
added 2026/05/19 12:00 a.m.11 views

This Week in Spring - May 19th, 2026

Hi Spring fans! Welcome to another installment of This Week in Spring!, this one written from the back of a taxi racing to the local Frankfurt train station, where I'll take a train to Munich for the amazing Kotlin Conf 2026 edition, where I'll be part of the keynote and deliver a talk on the...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/19 12:00 a.m.17 views

Malicious code in @antv/gi-assets-graphscope (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/19 12:00 a.m.24 views

Malicious code in @antv/f2-site (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/19 12:00 a.m.19 views

Malicious code in @antv/l7-react (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/19 12:00 a.m.28 views

Malicious code in @antv/x6-vue-shape (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/19 12:00 a.m.18 views

Malicious code in @antv/ckb (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
Rows per page
Query Builder