Tag · 2 articles

Npm

Jul 20, 2026 · 3 min read

Mini Shai Hulud: Compromised @antv npm Packages Enable CI/CD Credential Theft

Learn about the Mini Shai Hulud attack on @antv npm packages and how it can lead to CI/CD credential theft. Protect your projects now.

Apr 4, 2026 · 5 min read

Axios Hijacked: npm Account Takeover Deploys Cross-Platform RAT to Millions

Axios, a popular npm package, was hijacked to deploy a cross-platform RAT affecting millions. Learn how this happened, its impact, and how to protect yourself.