Safeguard
Tag

antv-npm-supply-chain-attack

Safeguard articles tagged "antv-npm-supply-chain-attack" — guides, analysis, and best practices for software supply chain and application security.

1 article

Software Supply Chain Security

Mini Shai-Hulud AntV npm packages compromise

A compromised npm maintainer account pushed 639 malicious @antv package versions in 10 minutes, stealing CI/CD secrets via a fake OpenTelemetry channel.

Jul 3, 20267 min read
antv-npm-supply-chain-attack — Safeguard Blog