Mini Shai-Hulud npm Attack: AntV Ecosystem Compromise (May 2026)
CYBERSECURITY FEATURED ANALYSIS

Mini Shai-Hulud npm Attack: AntV Ecosystem Compromise (May 2026)

SOURCE

Chainguard: Unchained

DATE

READ

1 min read

The Mini Shai-Hulud npm worm compromised 314 packages in the AntV ecosystem on May 19, 2026 — including echarts-for-react and timeago.js.

The Mini Shai-Hulud npm worm compromised 314 packages in the AntV ecosystem on May 19, 2026 — including echarts-for-react and timeago.js.