npm supply chain attacks infect hundreds of packages with Shai-Hulud worm

A series of coordinated supply‑chain attacks have flooded the npm registry with malicious packages that embed the Shai‑Hulud worm. In the latest wave, more than 600 packages were compromised, many belonging to the @antv visualization namespace, allowing the malware to steal npm and GitHub tokens, cloud‑provider keys, Kubernetes service‑account tokens, HashiCorp Vault credentials, SSH keys and even cryptocurrency wallets. The worm exfiltrates data by creating public GitHub repositories under the victim’s account and can generate valid Sigstore attestations to appear as trusted releases.

A “mini‑Shai‑Hulud” variant published 637 malicious versions across 317 packages in a 22‑minute burst, targeting popular libraries such as size‑sensor, echarts‑for‑react and timeago.js. The attack re‑uses the same obfuscated Bun payload, harvests credentials from CI/CD environments (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI, Vercel, Netlify) and injects persistence mechanisms via GitHub workflow files and system‑level services.

Separate incidents use similar techniques: the TanStack supply‑chain breach compromised 42 npm packages by poisoning GitHub Actions caches and abusing OIDC token publishing, while a copy‑cat worm appeared in the chalk‑template package and three other stealer modules, adding a DDoS botnet component. Collectively, these attacks expose a growing threat to the open‑source ecosystem, forcing developers to audit dependencies, rotate credentials, and strengthen CI/CD security measures.