Lucene search
+L

288 matches found

OSV
OSV
added 2026/05/19 12:00 a.m.23 views

MAL-2026-3876 Malicious code in @antv/dw-random (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:00 a.m.17 views

MAL-2026-4018 Malicious code in @antv/github-config-cli (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:00 a.m.12 views

MAL-2026-4007 Malicious code in @antv/gi-assets-scene (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:00 a.m.13 views

MAL-2026-3958 Malicious code in @antv/g-plugin-yoga (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:00 a.m.12 views

MAL-2026-3893 Malicious code in @antv/f2-graphic (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:00 a.m.13 views

MAL-2026-3964 Malicious code in @antv/g-web-components (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:00 a.m.10 views

MAL-2026-3959 Malicious code in @antv/g-plugin-zdog-canvas-renderer (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:00 a.m.12 views

MAL-2026-3946 Malicious code in @antv/g-plugin-html-renderer (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
Rows per page
Query Builder